Security in Azure

Security is a core part of everything, not just in Azure. Throughout the book, I have talked about security aspects of the technologies and services covered. However, I want to spend a little more time on a few key topics and ways of thinking about certain aspects of cloud usage that are broad across any specific technology.

Advanced Threat Protection (ATP)

This follows very closely from looking at monitoring available in Azure. When I talked about storing various signals, such as logs and metrics, I pointed out that simply looking at signals and trying to generate alerts from a single piece of telemetry for security purposes is typically impractical. Keeping logs and metrics is useful for forensic purposes after an attack, but trying to detect an attack from manually created rules based on metric values or log content is likely to fail. To detect threats, we typically need to not only look at combinations of signals but also apply intelligence. This is where the various...