Restore a blob's current content separately from undeleting its versions
Undelete restores retained soft-deleted versions together; it does not make one of them the current blob.
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 68 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,626 articlesGuidance and analysis from DSE
Keep SAS issuance records outside Azure Storage's token inventory
Azure Storage does not keep a count or inventory of client-generated SAS tokens, so an issuance register must come from the issuing process.
Read the guide
Check iSCSI client digest support before enforcing Elastic SAN CRC protection
Volume-group checksum enforcement can reject clients that cannot supply the required header or data digests.
Read the guide
Refresh Windows P2S client profiles after changing an Azure Files VPN gateway
A gateway's changed tunnel, certificate or authentication settings can leave previously installed client packages stale.
Read the guide
Do not mistake a Table Storage RowKey OR filter for indexed point lookups
Combining selected RowKey values with OR produces a partition scan rather than a range query.
Read the guide
Plan workload movement separately from scale-set zone expansion
Does adding zones to an existing scale set move its current instances and their data into those zones?
Read the guide
Inventory every storage destination before associating a service endpoint policy
The subnet's new allowlist affects Azure Storage service-endpoint access across regions, not only the account used in a pilot.
Read the guide
Define the isolation boundary of Virtual WAN's branch-to-branch switch
Disabling branch-to-branch connectivity does not disable branch-to-VNet or VNet-to-VNet connectivity.
Read the guide
Do not count iOS open-network timeline entries as every Wi-Fi reconnection
Why can repeated open-Wi-Fi connections produce few Defender timeline events and no new alerts?
Read the briefing
Do not treat an app-governance activity count as a retained Graph audit trail
Why might an OAuth threat alert show a spike without containing every underlying API activity?
Read the guide