Do not close security findings from Azure Advisor preview completion state
Keep security-recommendation status separate from the preview lifecycle states supported for other Advisor categories.
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 27 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Check the certificate Application Gateway v2 returns without SNI
Review HTTPS rule priority as part of the certificate presented to clients that omit a server name.
Read the guide
Recognize tenant-wide targeting before using the Windows client monitoring installer
Can a monitored-object DCR target only selected Windows clients inside a Microsoft Entra tenant?
Read the briefing
Backfill each member policy when deploying a diagnostic-settings initiative
Does assigning a diagnostic-settings initiative automatically configure every existing resource?
Read the guide
Inspect Bicep what-if diagnostics before treating an omitted resource as unchanged
Distinguish incomplete prediction from a clean deployment preview when expressions or modules cannot be analyzed.
Read the guide
Account for SAS-bearing linked-template URLs in deployment records
Do not assume a secure-string parameter keeps a linked template's SAS out of deployment-operation logs.
Read the guide
Review dependency expansion when an ARM deployment job exceeds size limits
Look beyond source-file length to expanded resources and all-to-all dependency relationships.
Read the guide
Choose Machine Configuration drift behavior explicitly
Separate a one-time application followed by monitoring from automatic correction on later evaluations.
Read the guide
Land new Azure subscriptions in an explicit default management group
Review the hierarchy's default landing group and its inherited controls before onboarding another subscription.
Read the guide
Resolve Azure Policy Kubernetes template conflicts at their source
Compare template names and source locations instead of treating a conflicting assignment as successfully installed.
Read the guide