Security 14 - Benoit's Corner

Azure – Retirement and replacement of specific features in Azure Security Center

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / May 3, 2019 / ASC, Azure, Azure Log Analytics, Azure Security, Azure Security Center, Azure Sentinel, Log Analytics, Security, Security Center, Sentinel

By July 31st, 2019, the following legacy features in Azure Security Center (ASC) will removed and replaced in either Azure Log Analytics or Azure Sentinel: Events Search Classic Identity & Access dashboard Threat intelligence dashboard Investigation flow in security alerts Edit security configuration settings for security policies Security and audit dashboard in Log Analytics You […]

Azure – Retirement and replacement of specific features in Azure Security Center Read More »

Azure AD – You can now use Directory Roles when configuring Conditional Access

Leave a Comment / Azure Active Directory, Beta / Preview, Microsoft Intune, Security / Benoit HAMET / April 26, 2019 / AAD, Azure Active Directory, Azure AD, Conditional Access, Directory Roles

As you know, Azure AD Conditional Access allows you to define conditions to allow or block access to Azure/Office 365 resource (https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview). When configuring such conditional access, you define to which set of users/groups this apply (or not – aka exclude). Now, you can apply the conditional access policy by using the Directory Roles to

Azure AD – You can now use Directory Roles when configuring Conditional Access Read More »

Azure – The Azure Information Protection Unified Labeling feature has reached the general availability

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / April 17, 2019 / AIP, AIP Unified Labelling, Azure Information Protection, Azure Information Protection Unified Labelling, Unified Label, Unified Labeling

As announced last year (https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Announcing-availability-of-information-protection-capabilities/ba-p/261967), the Azure Information Protection (AIP) Unified Labeling client is now generally available. This client uses the Office 365 Security and Compliance labels and policies, providing you with new protection features like custom sensitive information type or complex condition. In the future, all new features will be developed and integrated only

Azure – The Azure Information Protection Unified Labeling feature has reached the general availability Read More »

Security – Microsoft Graph Security PowerShell module is now available

Leave a Comment / Microsoft Azure, Office 365, Security / Benoit HAMET / April 5, 2019 / Microsoft Graph, Microsoft Graph Security, PowerShell

If you work with Azure and/or Office 365, you may already have heard about Microsoft Graph and Microsoft Graph Security. Well, good new a PowerShell module for Microsoft Graph Security is now available https://www.powershellgallery.com/packages/MicrosoftGraphSecurity/1.0.0 As always with PowerShell modules available from the PowerShell gallery, you can install it using the command from a elevated PowerShell

Security – Microsoft Graph Security PowerShell module is now available Read More »

Azure AD – Azure AD Password Protection is now GA

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / April 3, 2019 / AAD, AAD Password Protection, Azure, Azure Active Directory, Azure AD, Azure AD Password, Azure AD Password Protection, Password Protection

You may already know that for quite some time there has been a new Azure security feature in preview called Azure AD Password Protection to help protect you against password based attacks and restrict the usage of bad/too well known password (see https://t.co/PnWZiWbWic) Well, the feature is now generally available. If you have been using

Azure AD – Azure AD Password Protection is now GA Read More »

Azure Information Protection – Integrate AIP with Cloud App Security to automatically apply labels

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / March 27, 2019 / AIP, Azure Information Protection, CAS, Cloud App Security, MCAS, Microsoft Cloud App Security

If you relies on cloud files repositories (like SharePoint Online) you can integrate Azure Information Protection (AIP) with Microsoft Cloud App Security (MCAS) to automatically apply labels on your files and improve your data governance. To do so, you need: Azure Information Protection capability activated on your tenant and have labels configured (this should go

Azure Information Protection – Integrate AIP with Cloud App Security to automatically apply labels Read More »

Azure – Azure Storage support for Azure AD access based now GA

Leave a Comment / Azure Active Directory, Microsoft Azure, Security / Benoit HAMET / March 26, 2019 / AAD, Azure, Azure Active Directory, Azure AD, Azure Storage, Queues, Storage Blobs

It has been in preview for quite some time, now the time has come and Azure Storage support for Azure Active Directory (AAD) access based in now generally available for Azure Storage Blobs and Queues. You can then take advantage of the advanced access control from Azure AD, like multi-factor authentication or conditional access. You

Azure – Azure Storage support for Azure AD access based now GA Read More »

Azure AD – New administration role available in preview: Authentication Administrators

Leave a Comment / Azure Active Directory, Security / Benoit HAMET / March 26, 2019 / AAD, Admin Role, Administration Role, Authentication Administrators, Azure Active Directory, Azure AD

The long awaited and requested Azure Active Directory (AAD) administrator role is now available in preview: Authentication Administrators. The Authentication Administrators role can manage authentication process for end-user, like manage multi-factor authentication (MFA) requirements for end-users (from activating to revoke the ‘remembering device’). You can manage Authentication Administrators role membership from your Azure AD (either

Azure AD – New administration role available in preview: Authentication Administrators Read More »

Exchange Online – You can now unblock restricted users

Leave a Comment / Exchange, Office 365, Security / Benoit HAMET / March 25, 2019 / Exchange, Exchange Online, ExO, O365, Office 365, Restricted Users, SCC, Security & Compliance Center, Security and Compliance, Security and Compliance Center

As you may know, with Exchange Online you can (and should have) set a policy an outbound spam policy to block users for sending email if they have been compromised. This has now been moved to the Security & Compliance Center (SCC) in the Alert section In addition of this move, administrators have now the

Exchange Online – You can now unblock restricted users Read More »

Azure – Enable Fusion for Azure Sentinel

Leave a Comment / Microsoft Azure, Security / Benoit HAMET / March 21, 2019 / Azure, Azure Sentinel, Fusion, Sentinel

With the launch of Azure Sentinel, the cloud SIEM solution from Microsoft, additional capabilities are being added to help improve awareness and security of your infrastructure, both on-premises and online. This may lead to an over flooding alert notifications and as such this reduce the comprehensiveness of a potential incident. To assist with it, Machine

Azure – Enable Fusion for Azure Sentinel Read More »