Resolve folder and file-ID scope gaps before migrating Cloud Apps file policies
Which file-policy conditions cannot retain their original scope when moved to Purview?
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 37 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Review outbound malware handling separately from custom inbound mail policies
Does a custom anti-malware policy configure protection for mail leaving a cloud mailbox?
Read the briefing
Investigate a Defender software-version mismatch before calling it an inventory error
Can Defender legitimately display a software version that differs from the locally installed version string?
Read the guide
Check Defender incident PDF coverage and freshness before using it as evidence
Can an incident PDF omit assets or evidence items and still be an expected export?
Read the guide
Provide cluster-local certificate secrets when moving to Application Gateway for Containers
An externally mounted Key Vault certificate is not the frontend certificate reference required by Application Gateway for Containers.
Read the guide
Inventory every autoscale webhook instead of trusting the first portal entry
Can the autoscale notification pane hide additional configured webhook destinations?
Read the checklist
Bound Bicep diagnostic suppression before accepting a clean build
How far does a Bicep diagnostic suppression extend beyond the line being reviewed?
Read the guide
Plan Bastion Kerberos DNS changes as a redeployment dependency
Microsoft warns that changed DNS server information does not propagate to an existing Bastion resource.
Read the guide
Separate Firewall Policy edit availability from continued firewall operation
A policy-region outage can prevent changes while linked Azure Firewall instances continue operating.
Read the guide
Reconcile remediation permissions after changing an Azure Policy definition
Editing roleDefinitionIds does not automatically update the existing assignment identity's grants.
Read the guide