Identify the updater before blocking a vulnerable application version
Can a vulnerable application still update when its main executable is blocked?
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 39 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Treat Sentinel incident grouping as initial guidance after Defender portal onboarding
Why can incident membership differ from a Sentinel analytics rule's grouping settings?
Read the briefing
Resolve Prometheus scrape credential files through the mounted secret, not a host path
What must match when an Azure Managed Prometheus scrape configuration references a credential or certificate file?
Read the guide
Check each action type before calling an Azure Monitor action group perimeter-isolated
Does a regional action group place every notification action inside a Network Security Perimeter?
Read the checklist
Make the Bicep executable explicit in an MSBuild pipeline
The MSBuild task and platform-specific Bicep command-line package have different roles in locating the compiler.
Read the guide
Design for the finite retry window of managed-application notifications
Azure managed-application webhooks retry selected failures, then drop an unavailable delivery after ten hours.
Read the guide
Separate Bastion shareable-link access from target-machine credentials
A shareable link removes the need to enter the Azure portal, but it does not contain the RDP or SSH credentials.
Read the guide
Match Connection Monitor's region to its Azure source machines
The region selected for the monitor constrains which Azure VM and scale-set sources appear in its source selection.
Read the guide
Include eligible assignments when retiring an Azure custom role
A role definition cannot be deleted while assignments still reference it, including eligible PIM assignments.
Read the guide
Complete both sides of a JSON-based Blob object-replication policy
Creating a destination policy does not automatically configure the source; both sides must use the destination-generated policy ID.
Read the guide