Microsoft Azure Security Center (2^nd Ed.)
IT Best Practices - Microsoft Press Series

NOW FULLY UPDATED: high-value Azure Security Center insights, tips, and operational solutions

Reflecting updates through mid-2019, this book presents comprehensive Azure Security Center techniques for safeguarding cloud and hybrid environments. Leading Microsoft security and cloud experts Yuri Diogenes and Dr. Thomas Shinder help you apply Azure Security Center?s robust protection, detection, and response capabilities in key operational scenarios. You?ll walk through securing any Azure workload, and optimizing key facets of modern security, from policies and identity to incident response and risk management. Brand-new coverage includes single-click remediation, IoT, improved container security, Azure Sentinel, and more. Whatever your security role, you?ll learn how to save hours, days, or even weeks by solving problems in the most efficient and reliable ways possible.

Two of Microsoft?s leading cloud security experts show how to:

• Implement a comprehensive new security paradigm designed specifically for cloud and hybrid environments
• Gain visibility and control to secure all key workloads
• Incorporate Azure Security Center into your security operations center, and integrate Azure AD Identity Protection Center and third-party solutions
• Adapt Azure Security Center?s built-in policies and definitions for your organization
• Perform security assessments, and implement Azure Security Center recommendations fast with single-click remediation
• Use incident response features to detect, investigate, and address threats
• Create high-fidelity fusion alerts to focus attention on your most urgent security issues
• Implement application whitelisting and just-in-time VM access
• Assess IoT device security with the Azure IoT Hub managed service
• Monitor user behavior and access, and investigate compromised or misused credentials
• Integrate Microsoft?s new Azure Sentinel Security Information and Event Management (SIEM) platform
• Customize and perform operating system security baseline assessments

 About This Book

• For cloud architects, designers, implementers, operations professionals, and security specialists working in Microsoft Azure cloud or hybrid environments
• For all IT professionals and decision-makers concerned with the security of Azure environments

CHAPTER 1  The threat landscape

CHAPTER 2  Introduction to Azure Security Center

CHAPTER 3  Policy management

CHAPTER 4  Strengthen your security posture

CHAPTER 5  Accessing security alerts from API

CHAPTER 6  Threat detection

CHAPTER 7  Protect your IoT solution with Azure Security Center

CHAPTER 8  SIEM integration

CHAPTER 9  Integration with other Microsoft solutions

CHAPTER 10  Accessing Security Center Alerts from API

APPENDIX A  Managing Security Center at Scale 

Yuri Diogenes has a Master of Science in cybersecurity intelligence and forensics investigation (UTICA College) and is a senior program manager for the Microsoft CxE Security team, where he primarily helps customers onboard and deploy Azure Security Center as part of their security operations/incident response. Yuri has been working for Microsoft since 2006 in different positions; he spent five years as a senior support escalation engineer for the CSS Forefront Edge team. From 2011 to 2017, he worked for the content development team where he also helped create the Azure Security Center content experience since its launch in 2016. Yuri has published a total of 21 books, mostly covering information security and Microsoft technologies. Yuri also holds an MBA and many IT/Security industry certifications, such as CISSP, E|CND, E|CEH, E|CSA, E|CHFI, CompTIA Security+, CySA+, Cloud Essentials Certified, Mobility+, Network+, CASP, CyberSec First Responder, MCSE, and MCTS. You can follow Yuri on Twitter at @yuridiogenes or read his articles at his personal blog: http://aka.ms/yuridio.

Tom Shinder is a cloud security program manager in Azure Security Engineering. He is responsible for Azure security technical content and education, Azure security baselining, and public cloud security competitive analysis. He has presented at many of the largest security industry conferences on topics related to both on-premises and public cloud security and architecture. Tom earned a bachelor’s degree in neuropsychobiology from the University of California, Berkeley, and an M.D. from the University of Illinois, Chicago. He was a practicing neurologist prior to changing careers in the 1990s. He has written more than 30 books on OS, network, and cloud security, including Microsoft Azure Security Infrastructure. Tom can be found hugging his Azure console when he’s not busy hiding his keys and se