Check locked metric-chart bounds before diagnosing missing telemetry
Can a locked vertical axis hide valid Azure Monitor values after automatic granularity changes?
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 63 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Avoid a hidden merge dependency that stops a workbook's downstream result
Will a hidden workbook merge step run when another merge step depends on it?
Read the guide
Select the editor's cloud before deploying Bicep from Visual Studio Code
Does a bicepconfig.json cloud profile select the cloud used by the editor's deployment command?
Read the guide
Allow for cross-tenant identity propagation in managed-application deployment
Treat identity creation and its availability for role assignment as separate steps in the documented preview flow.
Read the guide
Prepare the App Service custom-domain binding before regional cutover
Separate target-app preparation from the later DNS change that directs users to it.
Read the guide
Preserve URI-based deployment for ARM pipeline templates using relativePath
Why can switching an ARM pipeline task to a local template break a linked template's relativePath?
Read the guide
Look in Activity Log when SKU validation leaves no deployment history
A template can fail SKU validation before a deployment starts, leaving evidence outside the deployment-history view.
Read the guide
Do not treat a polled ExpressRoute route-count alert as a deployment gate
Route additions can outrun the custom alert workflow, and collection runtime must be considered when setting its recurrence.
Read the guide
Do not treat Azure Firewall's DNS server list as an ordered fallback chain
Review random upstream selection and the absence of an extra fallback when every configured DNS server is unavailable.
Read the guide
Count hot destination pairs when reviewing Load Balancer SNAT pressure
For TCP, the destination address and port determine whether a translated source port can be reused by another active connection.
Read the guide