Microsoft Azure Security Center

by Diogenes, Yuri; Shinder, Tom

• ISBN13: 9780135752036
• ISBN10: 0135752035
• Edition: 2nd
• Format: Paperback
• Copyright: 2019-10-05
• Publisher: Microsoft Press

Summary

NOW FULLY UPDATED: high-value Azure Security Center insights, tips, and operational solutions

 

Reflecting updates through mid-2019, this book presents comprehensive Azure Security Center techniques for safeguarding cloud and hybrid environments. Leading Microsoft security and cloud experts Yuri Diogenes and Dr. Thomas Shinder help you apply Azure Security Center’s robust protection, detection, and response capabilities in key operational scenarios. You’ll walk through securing any Azure workload, and optimizing key facets of modern security, from policies and identity to incident response and risk management. Brand-new coverage includes single-click remediation, IoT, improved container security, Azure Sentinel, and more. Whatever your security role, you’ll learn how to save hours, days, or even weeks by solving problems in the most efficient and reliable ways possible.

 

Two of Microsoft’s leading cloud security experts show how to:

• Implement a comprehensive new security paradigm designed specifically for cloud and hybrid environments
• Gain visibility and control to secure all key workloads
• Incorporate Azure Security Center into your security operations center, and integrate Azure AD Identity Protection Center and third-party solutions
• Adapt Azure Security Center’s built-in policies and definitions for your organization
• Perform security assessments, and implement Azure Security Center recommendations fast with single-click remediation
• Use incident response features to detect, investigate, and address threats
• Create high-fidelity fusion alerts to focus attention on your most urgent security issues
• Implement application whitelisting and just-in-time VM access
• Assess IoT device security with the Azure IoT Hub managed service
• Monitor user behavior and access, and investigate compromised or misused credentials
• Integrate Microsoft’s new Azure Sentinel Security Information and Event Management (SIEM) platform
• Customize and perform operating system security baseline assessments

 About This Book

• For cloud architects, designers, implementers, operations professionals, and security specialists working in Microsoft Azure cloud or hybrid environments
• For all IT professionals and decision-makers concerned with the security of Azure environments

Author Biography

Yuri Diogenes (Keller, TX) is a Senior Content Developer on the CSI Enterprise Mobility Team, focusing on BYOD and Azure Security Center. Previously, Yuri has worked as a writer for the Windows Security Team and as a Support Escalation Engineer for the CSS Forefront Team, also at Microsoft. He has a Master of Science degree in Cybersecurity Intelligence and Forensics from UTICA College and an MBA from FGF in Brazil, and he holds several industry certifications. He is co-author of Enterprise Mobility Suite: Managing BYOD and Company-Owned Devices (Microsoft Press, 2015), Microsoft Forefront Threat Management Gateway (TMG) Administrator's Companion (Microsoft Press, 2010), and three other Forefront titles from Microsoft Press.

Dr. Thomas Shinder (Rowlett, TX) is a program manager in Azure Security Engineering and a 20-year veteran in IT security. Tom is best known for his work with ISA Server and TMG, publishing nine books on those topics. He was also the leading voice at ISAserver.org. After joining Microsoft in 2009, Tom spent time on the UAG DirectAccess team and then took a 3-year vacation from security to be a cloud infrastructure specialist and architect. He's now back where he belongs in security, and spends a good deal of time hugging his Azure Security Center console and hiding his secrets in Azure Key Vault.

Table of Contents

Chapter 1 — Threat Landscape

Chapter 2 — Azure Security Center

Chapter 3 — Policy Management

Chapter 4 — Strength your Security Posture

Chapter 5 — Advanced Cloud Defense

Chapter 6 — Threat Detection

Chapter 7 - Using Threat Intelligence to Identity Security Issues

Chapter 8 — Exporting Logs to a SIEM Solution

Chapter 9 — Integration with other Microsoft solutions

Chapter 10 — Accessing Security Center Alerts from API and Intelligent Secure Graph

Appendix 1 — Automation using ARM Template