{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "slug": "dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download", "url": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/" }, "title": "Confirm a managed disk is unattached before a Storage Explorer download", "summary": "DSE recommends separating the export request from any operational decision to detach a workload disk.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:34:35+00:00", "modified_at": "2026-09-17T16:35:03+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 1, "word_count": 216, "potentially_affected": "This check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.", "dse_recommendation": "DSE recommends separating the export request from any operational decision to detach a workload disk.", "primary_source": { "name": "Use Azure Storage Explorer to manage Azure managed disks - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft’s Storage Explorer workflow requires a managed disk to be in the Unattached state before downloading it as an on-premises VHD. The download is selected from the disk’s resource group, and progress is shown in Activities. Microsoft Learn

\n

Applicability

\n

This check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.

\n

DSE recommendation

\n

DSE recommends separating the export request from any operational decision to detach a workload disk. Record the subscription, resource group, disk identifier, and intended local file path before proceeding. If the disk is attached, coordinate the appropriate workload change with its owner rather than interpreting the export task as permission to interrupt it. Arrange the destination’s capacity, access, and handling requirements before starting the transfer.

\n

Verification

\n

Inspect the disk state immediately before the download and retain the observed identifier with the transfer record. Follow the operation in Activities, then confirm the expected VHD exists at the approved destination. Compare the completed operation with the requested disk and record any error or incomplete result. Treat a successful transfer as file-delivery evidence, with any boot or recovery test handled separately.

\n

Official references

\n", "content_text": "Source facts\nMicrosoft’s Storage Explorer workflow requires a managed disk to be in the Unattached state before downloading it as an on-premises VHD. The download is selected from the disk’s resource group, and progress is shown in Activities. Microsoft Learn\nApplicability\nThis check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.\nDSE recommendation\nDSE recommends separating the export request from any operational decision to detach a workload disk. Record the subscription, resource group, disk identifier, and intended local file path before proceeding. If the disk is attached, coordinate the appropriate workload change with its owner rather than interpreting the export task as permission to interrupt it. Arrange the destination’s capacity, access, and handling requirements before starting the transfer.\nVerification\nInspect the disk state immediately before the download and retain the observed identifier with the transfer record. Follow the operation in Activities, then confirm the expected VHD exists at the approved destination. Compare the completed operation with the requested disk and record any error or incomplete result. Treat a successful transfer as file-delivery evidence, with any boot or recovery test handled separately.\nOfficial references\n\nMicrosoft: Use Azure Storage Explorer to manage Azure managed disks – Azure Virtual Machines | Microsoft Learn", "content_markdown": "## Source facts\n\nMicrosoft’s Storage Explorer workflow requires a managed disk to be in the Unattached state before downloading it as an on-premises VHD. The download is selected from the disk’s resource group, and progress is shown in Activities. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks)\n\n## Applicability\n\nThis check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.\n\n## DSE recommendation\n\nDSE recommends separating the export request from any operational decision to detach a workload disk. Record the subscription, resource group, disk identifier, and intended local file path before proceeding. If the disk is attached, coordinate the appropriate workload change with its owner rather than interpreting the export task as permission to interrupt it. Arrange the destination’s capacity, access, and handling requirements before starting the transfer.\n\n## Verification\n\nInspect the disk state immediately before the download and retain the observed identifier with the transfer record. Follow the operation in Activities, then confirm the expected VHD exists at the approved destination. Compare the completed operation with the requested disk and record any error or incomplete result. Treat a successful transfer as file-delivery evidence, with any boot or recovery test handled separately.\n\n## Official references\n\n- [Microsoft: Use Azure Storage Explorer to manage Azure managed disks – Azure Virtual Machines | Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks)" }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "url": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Confirm a managed disk is unattached before a Storage Explorer download", "item": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "url": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/", "headline": "Confirm a managed disk is unattached before a Storage Explorer download", "description": "DSE recommends separating the export request from any operational decision to detach a workload disk.", "abstract": "DSE recommends separating the export request from any operational decision to detach a workload disk.", "articleBody": "Source facts\nMicrosoft’s Storage Explorer workflow requires a managed disk to be in the Unattached state before downloading it as an on-premises VHD. The download is selected from the disk’s resource group, and progress is shown in Activities. Microsoft Learn\nApplicability\nThis check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.\nDSE recommendation\nDSE recommends separating the export request from any operational decision to detach a workload disk. Record the subscription, resource group, disk identifier, and intended local file path before proceeding. If the disk is attached, coordinate the appropriate workload change with its owner rather than interpreting the export task as permission to interrupt it. Arrange the destination’s capacity, access, and handling requirements before starting the transfer.\nVerification\nInspect the disk state immediately before the download and retain the observed identifier with the transfer record. Follow the operation in Activities, then confirm the expected VHD exists at the approved destination. Compare the completed operation with the requested disk and record any error or incomplete result. Treat a successful transfer as file-delivery evidence, with any boot or recovery test handled separately.\nOfficial references\n\nMicrosoft: Use Azure Storage Explorer to manage Azure managed disks – Azure Virtual Machines | Microsoft Learn", "datePublished": "2026-09-17T16:34:35+00:00", "dateModified": "2026-09-17T16:35:03+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Confirm a managed disk is unattached before a Storage Explorer download" }, "articleSection": [ "IT" ], "keywords": [ "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 216, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Use Azure Storage Explorer to manage Azure managed disks - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks" } } ] } }