Distinguish a Policy reevaluation from a fresh guest configuration audit
An on-demand Azure Policy evaluation reads the latest Machine Configuration result; it does not initiate another check inside the machine.
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 34 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Remove query shapes that prevent Resource Graph continuation
A missing continuation token can reflect a query's operators or output types, not a complete inventory.
Read the guide
Track a Network Watcher capture file beyond the capture resource
The capture session, its resource and its stored file have different completion and deletion behavior.
Read the guide
Coordinate both owners before removing a preview perimeter link
Either participating network security perimeter can initiate removal without the other administrator's consent.
Read the guide
Reduce Azure role-assignment counts without preserving excessive scope
A broader duplicate assignment is not automatically the one to keep when a subscription reaches its assignment limit.
Read the guide
Preserve Route Server BGP communication when inserting a firewall route
An inspection route can unintentionally divert the control-plane traffic needed by the gateway or peered appliance.
Read the guide
Account for zonal upgrade sequencing in Service Fabric timeouts
Hierarchical and Parallel zonal modes group upgrade domains differently; faster cross-zone progression is not equivalent to zone-by-zone rollout.
Read the guide
Allow for Resource Health transitions that never enter the Activity Log
Resource Health's documented logging exclusions prevent the Activity Log from being a complete record of every observed state change.
Read the guide
Restore a blob's current content separately from undeleting its versions
Undelete restores retained soft-deleted versions together; it does not make one of them the current blob.
Read the guide
Keep SAS issuance records outside Azure Storage's token inventory
Azure Storage does not keep a count or inventory of client-generated SAS tokens, so an issuance register must come from the issuing process.
Read the guide