Azure / Office365: monitoring & hardening

Azure monitoring & hardening

What is the best way to build and automate security in the world of Azure?

For this episode, Robby has invited someone that spends all their time doing exactly that, or more specifically, identifying all the things that can go wrong within the Microsoft ecosystem; Rik van Duijn, Hacker & Co-Founder of the Dutch cybersecurity company Zolder B.V.

They discuss what’s beneficial for organisations to manage themselves – and what the realistic expected workload is. They also discuss hardening of Azure tenants, deployment and tuning of Azure Sentinel, importance of logging for incident responders and other Azure central components that are noteworthy. 

During their conversation, Rik also shares what he would recommend automating, and what he would not automate. As well as what the biggest challenges his clients most often experience are.