Azure

Nathan McNulty
Limit Azure Arc management capabilities
Use monitor mode and local extension controls to limit what Azure Arc can do on your servers.
Nathan McNulty
Enable Defender for Servers Plan 1 on selected machines
Use resource-level Defender for Servers Plan 1 and built-in Azure Policy for selected machines.
Nathan McNulty
Ingest Azure Activity Logs into Sentinel
Collect Azure Activity Logs in Sentinel and check which tables have ingestion charges.
Nathan McNulty
Enable Azure cost anomaly alerts
Set up free cost anomaly alerts to help catch unexpected Azure spending.
Lab - Certificate Authority Setup
Lab - Certificate Authority Setup
This step-by-step tutorial is ideal for those looking to experiment with Certificate Authority setups in a lab environment. Learn how to configure an offline CA using OpenSSL, use it to sign an Enterprise ADCS Intermediate CA, and publish CRLs in an Azure Static Web App.
Nathan McNulty
Check Log Analytics ingestion delay
Compare event and ingestion timestamps to see how long records take to reach Log Analytics.
Azure - Securing Subscriptions
Azure - Securing Subscriptions
Note This article was last updated on 01/30/2025 for readability and updated URLs
Azure Arc - Onboarding Servers with Group Policy
Nathan McNulty
Look up Azure service IP ranges
Retrieve Azure service tag address ranges with PowerShell for outbound filtering.