Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Azure Diagnostics
Skimming Credentials with Azure's Front Door WAF
A Web Application Firewall (WAF) is a powerful thing. It inspects all traffic that traverses it, seeing everything that is submitted to a page. EVERYTHING. Today we’ll demonstrate how an attacker could use access to the Front Door WAF in Azure and Log Analytics to skim credentials from a site that the WAF is protecting. By creating a custom rule to match logon events, we can capture both usernames and passwords in cleartext as they make their way through the WAF.
Capturing errors and auditing in Azure SQL DB – SQLServerCentral
Logging is a necessity in the database world, well, the entire tech world. You need to know what is happening in and around your databases. It’s easy to setup in Azure SQL DB. This post will guide you through setting up and querying diagnostic settings to access your database logs easily. It’s a good idea to have a dedicated log analytics workspace, rather than using the default one. You can use this to create one before setting up your diagnostic setting, or you can use an existing one.
Routing options for VMs without Default Outbound Internet Access (from Private Subnets)
Virtual Machines deployed in Azure used to haveDefault Outbound Internet Access. Until today, this allows virtual machines to connect to resources on the internet (including public endpoints of Azure PaaS services) even if the Cloud administrators have not configured any outbound connectivity method for their virtual machines explicitly. Implicitly, Azure's network stack performed source network address translation (SNAT) with a public IP address that was provided by the platform.
Kusto (KQL) for Azure SQL Audit – SQLServerCentral
According to Rod Trent, Kusto is named after Jacques Cousteau. He says, “We are exploring the depths of our data” by searching and querying our Azure log data. His book is a great introduction and is helpful even if you’ve been using Kusto Query Language (KQL) for a while. I learned a lot along the way, but his book helped to solidify my knowledge. This post will focus on using KQL with Azure SQL audit data. For this post, I will use Kusto and KQL interchangeably.
Azure Workbooks - SQLServerCentral
I’m saddened that the Workspace Summary is being deprecated in Log Analytics Workspace. I am trying to reproduce it in workbooks. While it isn’t an exact match, workbooks provide me with enough information to use and share with others. You can get additional resource examples and explanations about Azure Workbooks from Microsoft. Workbooks are available in different Azure resources, including Log Analytics Workspaces.
Securing Network Egress in Azure Container Apps
Introduction Since its inception nearly two years ago, Azure Container Apps (ACA) has added significant features to make it a relevant container hosting platform. Built atop Kubernetes, Azure Container Apps is a fully managed Platform-as-a-Service that empowers Azure container workloads to focus on the business value they provide, not be mired in infrastructure management.
Mastering AKS Troubleshooting #3: Kernel view and AKS Observability
This blog post concludes the three part series that addresses common networking problems that may occur while working with Azure Kubernetes Service (AKS). Although AKS is a managed container orchestration service, issues can still arise, requiring troubleshooting. The earlier blog post covered endpoint connectivity issues across virtual networks and port configuration problems with services and their associated pods.
Pulling Azure Analysis Services logs from Azure Log Analytics into PowerBI using Kusto Query Language (KQL) – SQLServerCentral
We have very large Analysis Services(SSAS) cubes with billions of records and hundreds of users so we need to be able to monitor the performance of queries. 95% of this universe are users of reports built for them by knowledgeable report builders. Those report builders are the 5% we are looking to monitor. The developers normally build within dev, however, there are situations where 1-off reports are being developed or a new report is being developed and there is an impact on production.
New Job -> Week 4 -> Set Up Auditing – SQLServerCentral
This is part of a series of new job blog posts. You can find them all here. The main goal for week 4: set up auditing for all Azure SQL Databases. This week is again about learning more Terraform. I’m using Terraform because my company requires this for infrastructure management. I’m setting up a home lab because I don’t want to practice my entry-level Terraform skills on work resources. Can you set up an Azure SQL database and auditing without all this automation? Yes, you can.
Automatically Enable LTR and PITR Policy upon a Database creation on Azure SQL Managed Instance
Introduction For any database created via Azure Portal, SSMS, ADS or via some automated scripting as a part of company's business requirements, it is frequently seen in large enterprises that there is a need to have a custom LTR (Long-Term Retention) and PITR (Point-in time Restore) policies to be enforced.
Audit Logging and Azure Active Directory in Azure Database for PostgreSQL Flexible servers.
Database audits are one of the important components that need to be set up based on your organization’s compliance requirements, where you can monitor the targeted activities to achieve your security baseline. In Azure database for PostgreSQL flexible server, you can achieve that by using pgaudit PG extension as described in Audit logging in Azure Database for PostgreSQL - Flexible server.
Estimating Azure Diagnostics Cost
Introduction There are many good reasons to enable Azure Diagnostics on your Azure PaaS resources, for example, auditing who has been accessing a Key Vault, troubleshooting failed requests to a Storage Account, doing a forensics analysis to a compromised Azure SQL Server, etc. Azure resource logging is recommended as part of the Operational Excellence and Security pillars of the Well Architected Framework.
Public Network Access to Azure Resources Is Too Easy to Configure Original
Network access restriction is a crucial layer of cyber security - an important pillar in securing resources. This is true even when other security controls to protect resources are in use, such as user name/password combination, connection strings or security tokens. Malicious actors find network restricted access difficult to get around. This was also the case when on-prem infrastructure was dominant.
Public Network Access to Azure Resources Is Too Easy to Configure
Network access restriction is a crucial layer of cyber security – an important pillar in securing resources. This is true even when other security controls to protect resources are in use, such as user name/password combination, connection strings or security tokens. Malicious actors find network restricted access difficult to get around. This was also the case when on-prem infrastructure was dominant.
Diagnostic logging - Azure Cognitive Services
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 02/11/2022 4 minutes to read In this article This guide provides step-by-step instructions to enable diagnostic logging for an Azure Cognitive Service. These logs provide rich, frequent data about the operation of a resource that are used for issue identification and debugging. Before you continue, you must have an Azure account with a subscription to at least one Cognitive Service, such as Speech Services, or LUIS.
Azure Virtual Desktop, ADFS SSO | The Case of the Trailing Slash
Dec 13 2021 09:48 AM Over the last few months, I have noticed that a lot of customers have been working to configure Active Directory Federation Services (AD FS) single sign-on for Azure Virtual Desktop (AVD) to enable a more seamless login solution for their hybrid AVD solution.
Log Analytics with Dedicated SQL Pools (Formerly SQL DW) – SQLServerCentral
There are a lot of services in Azure. Way more than a few. What is something you want to do with all your services and applications? You want to monitor them. How do you do that? By looking at the logs that are produced. How do you capture and make sense of thousands of log entries from hundreds of services for this really awesome solution you’ve been working on? Azure Monitor. This post isn’t about Azure Monitor though. Not directly anyway.
Log Analytics with Dedicated SQL Pools (Formerly SQL DW) – SQLServerCentral
There are a lot of services in Azure. Way more than a few. What is something you want to do with all your services and applications? You want to monitor them. How do you do that? By looking at the logs that are produced. How do you capture and make sense of thousands of log entries from hundreds of services for this really awesome solution you’ve been working on? Azure Monitor. This post isn’t about Azure Monitor though. Not directly anyway.
Log Analytics with Dedicated SQL Pools (Formerly SQL DW) – SQLServerCentral
There are a lot of services in Azure. Way more than a few. What is something you want to do with all your services and applications? You want to monitor them. How do you do that? By looking at the logs that are produced. How do you capture and make sense of thousands of log entries from hundreds of services for this really awesome solution you’ve been working on? Azure Monitor. This post isn’t about Azure Monitor though. Not directly anyway.
Open Policy Agent Applications Access Logs
Explore Azure Web App access logs for Open Policy Agent Applications to enhance security and compliance monitoring. The framework for autonomous intelligence Azure Web App Access Logs provide critical insights into the usage and performance of your web applications hosted on Azure. These logs capture detailed information about incoming requests, including the request method, URL, response status, and the time taken to process each request.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Azure
Contact Azure, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack