Do not use a selector label to narrow a WAF EqualsAny exclusion
Application Gateway replaces the selector with an asterisk when an EqualsAny exclusion is created.
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 49 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,658 articlesCybersecurity
Keep DLP-enabled Windows clients away from SAP application shares
Why can a Windows client's Endpoint DLP configuration matter to a SAP server share?
Read the briefing
Separate a local cloud-app score override from a catalog correction request
Should a disputed Defender for Cloud Apps score be overridden locally or submitted for catalog review?
Read the guide
Bound Defender certificate inventory to the Windows machine stores it observes
What does Defender Vulnerability Management certificate inventory establish, and which certificate locations remain outside it?
Read the explainer
Test iOS app sign-in at the incoming-data boundary
Do not mistake IntuneMAMRequireAccounts for an unconditional app-launch sign-in control.
Read the guide
Choose an owned workspace before requiring protected Application Insights tables
Can an Application Insights managed workspace be reused or configured with protected tables?
Read the explainer
Do not treat a successful Azure Firewall packet capture as coverage of every instance
The documented success threshold is captures from at least half of the firewall's underlying compute instances.
Read the guide
Identify VM scale-set NAT Pools before adding every V1 NAT rule to a retirement plan
The September 2027 retirement applies to Inbound NAT Pools, not single-VM V1 inbound NAT rules.
Read the guide
Supply the principal type when a just-created identity's Azure role assignment races replication
A newly created service principal can be unavailable to a role-assignment operation in another region.
Read the guide
Check the first-consumer message before treating a restored Container Storage claim as failed
The documented Elastic SAN snapshot restore can leave its new PVC Pending until a consuming pod is created.
Read the guide