The Lessons learned from the Microsoft SOC blog series is designed to share our approach and experience with security operations center (SOC) operations. Our learnings in the series come primarily from Microsoft’s corporate IT security operation team, one of several ... continue reading

First published on MSDN on Sep 13, 2018 We are pleased to announce that Azure SQL Database Audit logs can now be written directly to Azure Log Analytics or Azure Event Hubs. This ability, now available in public preview, provides ... continue reading

First published on MSDN on Dec 28, 2017 We are happy to inform that the Azure Log Analytics (OMS) Agent is now capable of pushing SQL Server audit logs into Azure Log Analytics (OMS), supporting SQL Server both on-premises, as ... continue reading

First published on TECHNET on Mar 13, 2017Hello, again! I am back and this time, we will look at how to start data collection for the Windows 10 Upgrade Readiness solution. This part assumes that you have a working Operations ... continue reading

First published on TECHNET on Mar 03, 2017Hello again. In my last post , I briefly touched upon the challenges application compatibility can present when planning a migration to a new version of Windows. We looked at how Upgrade Readiness ... continue reading

First published on TECHNET on Feb 24, 2017Hello! My name is Nandan, I am a Premier Field Engineer in the Windows Platforms team with Microsoft UK.With this article, I would like to give you a quick introduction to Upgrade Readiness ... continue reading

As more and more enterprises move to the cloud, they also bring their own set of security challenges. Today, almost half of Azure virtual machines (VMs) are running on Linux, and as the Linux server population grows, so are the ... continue reading

First published on TECHNET on Sep 20, 2016 With thousands of new malware released every day, it may not be sufficient to only use signature-based detection to fight against malware. Device Guard on Windows Server 2016 changes from a mode ... continue reading

First published on TECHNET on Oct 26, 2017 The following is a special guest blog from Savision Modern enterprise IT infrastructures are becoming increasingly difficult to manage as the deployment of new services and applications continues to grow. Applications tend ... continue reading

First published on TECHNET on Jul 06, 2017 DPM can backup a variety of workloads as SQL, SharePoint, Exchange, Hyper-V VMs, File Servers, among others. One way to monitor the DPM servers centrally is using SCOM. In this blog, our ... continue reading