In the Azure cloud Log Analytics workspace, Azure sentinel, Azure Monitor, PowerBi and other cloud services provide unique capabilities for logging, monitoring and reporting. In this quick tip I am going to share a Powershell Script that can help send custom data into Log Analytics workspace based on which you can then create Sentinel Analytics […]
I will start this tip with a use case. A cloud ops team member reached out to me seeking help with sending out a report from a script he had that collected Citrix data using REST API. He wanted to embed the capability to send email right into his script that was written in Powershell. […]
The following code can help you fetch Azure recommendations from all you subscriptions in your tenancy. I you are a CSP, the customer subscriptions should be visible under your tenancy due to the CSP delegation. If a single account has access to multiple tenancies, without having to use the CSP delegation you can also set […]
Scenario: If you have two IIS servers behind a load balancer you would want one of them to be available in case of a failure. Availability sets and availability zones are a good way to ensure VM’s do not run on the same rack, power supply and storage in a Microsoft Data center. Availability zone […]
You environment may have more than one log analytics workspaces from which you may want to fetch logs in a central view for building PowerBI reports or for any other reasons. Log Analytics Workspace is an extremely powerful tool. If you have looked at some of my other posts you will come across some great […]
One of the important SIEM use case is incident management and Azure Sentinel offers robust features that help the organizations manage the life cycle of security incidents and alerts. Since ServiceNow is one of the most widely used tools in IT and is growing rapidly, organizations need to integrate ServiceNow with Azure for asset discovery, […]
You can not always prevent Public IP addresses on Virtual Machines. Brute force attacks commonly target management ports 22 for SSH and 3389 for RDP as a means to gain access to virtual Machines. Attackers keep scanning Public Ip addresses and open ports to attack vulnerabilities to gain access. If the virtual machine is not […]
The accelerated networking provides consistent ultra low network latency via Azure’s in-house programmable hardware and technologies such like SR-IOV. By using Azure’s software defined networking stack, packets are offloaded from the VM CPU’s to the FPGA-based Smart NICs, thereby leading to compute cycles being reclaimed by end user applications running on the VM, putting less […]
Power BI is a great tool from Microsoft which makes it easy to create reports and send them out on scheduled intervals. The ability to pick log analytics data and build reports from them is what we are going to explore today in this blog article. Prerequisites Step 1: Verify you have some logs captured […]
Azure Bastion is a great product and I have been using it for a while now. It is easy to deploy and manage. During a recent discussion with a Cloud Architect “Guacamole” was mentioned to me as an alternative to Bastion. I thought of trying it in Azure. Before I could find the steps and […]