Azure Security Specialist

Introduction to Azure and Entra ID

Basics of Azure architecture

Collecting activity logs

Collecting Entra ID Logs

Azure networking and VNets

Understanding Azure Service Endpoints

Understanding Azure Private Endpoints

Understanding Azure NSGs

Understanding Azure Firewalls

Password spraying playbook

Password spraying detection, investigation and remediation

How consent phishing works

Consent phishing detection, investigation and remediation

What are Conditional Access Policies and how to use them

Findings gaps in Conditional Access Policies

Identifying misconfigured Conditional Access Policies

Conditional Access Policies best practices

Understanding IAM and RBAC

Implementing identity governance

Reviewing and understanding Identity Secure Score

PIM and other security features

Detecting early signs of an attack - storage enumeration

Understanding and analyzing storage access methods

Identifying misconfigured storage accounts

Securing storage and enforcing governance

Changing default security misconfigurations in Azure

Monitoring Azure service principals logins

Highlighting risky service principals in Azure

How are Azure key vaults protected

Security issues with policy based key vaults

Locking down Azure key vaults with RBAC

Firewalling Azure key vaults for extra security

Hardening Azure key vaults using endpoints

Common vulnerabilities in Azure VMs

How Azure VMs get hacked

Securing Azure VMs with identity

Securing Azure VMs with update management

Applying disk encryption to Azure VMs