Preserve Update Manager evidence before its query windows expire
Plan evidence retrieval around the separate assessment and installation history windows in Azure Resource Graph.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 57 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Use the VM resource API that matches the scale set's orchestration mode
Why does a scale-set management script need different instance-detail calls for Flexible and Uniform orchestration?
Read the guide
Check CPU capability and framework use separately when evaluating Intel AMX
Does selecting an AMX-capable Azure CPU establish that an AI workload is using its matrix accelerator?
Read the guide
Keep Windows Custom Script work inside its execution and restart boundaries
Which script behaviors can prevent a Windows Custom Script Extension operation from completing reliably?
Read the guide
Check subscription admission before planning growth on restricted older VM series
Can an existing deployment's VM series be assumed available in a new subscription or after a quota increase?
Read the guide
Keep Azure public addresses out of guest IP configuration
Distinguish Azure's public-address translation from private addresses that need matching guest configuration.
Read the guide
Supply each forced-tunnel Virtual WAN hub with its own default-route source
Check the local default-route advertisement and connection flags before relying on hub-to-hub internet transit.
Read the guide
Distinguish a WAF rule match from the final anomaly-score action
Interpret Application Gateway WAF match events together with policy mode and the aggregate request score.
Read the guide
Do not expect a Monitor only Cloud Apps session policy to record file activity
Does the Monitor only session-control type observe downloads as well as sign-ins?
Read the guide
Account for every recipient when a tenant sender block rejects outbound mail
Can one blocked recipient cause a message to fail for its other internal and external recipients?
Read the guide