Some time ago I came across an absolutely beautiful resource full of different types of diagrams that could be used to convey messages - think venn diagrams and that kind of thing. I liked it, or shared it, saved in LinkedIn saved items or Twitter bookmarks. It could have been buried in favourites under my professional or personal Edge profiles, sent to Instapaper… Who knows. I can’t find it. It’s gone. Vanished into the digital ether. So I’m going to give this a go, a static page with a very straightforward set of links for stuff on the internet - blog posts, books, videos, tools and exams. I’m going to try out pasting things right into here as a centralised reading list. We’ll see how it goes!
Ransomware
- 2021 Microsoft Digital Defence Report: “https://aka.ms/MDDR"
- The DART guide to combatting human-operated ransomware:
- Part one
- Part two
- Part three (loading, please wait)
- Azure Defences for Ransomware Attack - “https://aka.ms/ADRA"
- Ransomware backup plan - “https://aka.ms/RansomwareBackupPlan"
- 3 Steps to protect and recover from ransomware - “https://aka.ms/ransomware3steps"
- Human Operated Ransomware - “https://aka.ms/Ransomware"
- Maximise ransomware resiliency with Azure and M365: “https://aka.ms/"ransomware-resilience-azure-m365
- Protecting M365 from on-premises attacks - “https://aka.ms/ProtectM365-fromOnPremAttack"
- Deploy ransomware protection for M365: “https://aka.ms/ProtectM365-Ransomware"
- Azure Sentinel Fusion detection for ransomware
SECURITY ARCHITECTURE
Security Compass – “https://aka.ms/SecurityCompass" Cyber Security Reference Architecture – “https://aka.ms/MCRA" CSRA Videos - aka.ms/mcra-videos Cloud Adoption Framework - “https://aka.ms/CAF"
Azure AD
Secure access practices in Azure AD - “https://aka.ms/SecureAccessAAD"
My Stuff
Cutting down the red forest (Stealthbits) Maersk, me & notPetya – “https://aka.ms/MaerskMeNotPetya" Protect identity from modern threat vectors (risual) Multi-Factor Authentication 2020 (risual)
Actual Books
Tools and Weapons: The Promise and the Peril of the Digital Age (Brad Smith) Alice and Bob Learn Application Security (Tanya Janca) Tribe of Hackers Blue Team: Tribal Knowledge from the Best in Defensive Cybersecurity (Marcus J. Carey) Functional Art, The: An introduction to information graphics and visualization (Alberto Cairo) Cloud Native Transformation (Pini Reznik, Jamie Dobson, Michelle Gienow) The Phoenix Project: A Novel about IT, DevOps, and Helping Your Business Win (Gene Kim) The Unicorn Project: A Novel about Developers, Digital Disruption, and Thriving in the Age of Data (Gene Kim) 97 Things Every Information Security Professional Should Know 97 Things Every Information Security Professional Should Know (Christina Morillo) Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers (Andy Greenberg) Thinking, Fast and Slow (Daniel Kahneman) Make It Stick: The Science of Successful Learning (Peter C. Brown) The Subtle Art of Not Giving a F*ck (Mark Manson)
Basics
📃 Does Your Organization Have a Security.txt File? – Krebs on Security 🎬 CrikeyCon 2021 - Jess Dodson - Back to Basics, Why can’t we get this stuff right?
Community
📃 Join Our Security Community - Microsoft Tech Community
EVERYTHING ELSE
Security Architecture Microsoft cloud for IT architects illustrations Common attacks and Microsoft capabilities that protect your organization Cloud Adoption Framework - “https://aka.ms/CAF" Cloud Adoption Framework videos - “https://aka.ms/CAFSecure-Videos" For the devs Microsoft Threat Modeling Tool overview - Azure | Microsoft Docs 📃 Story points: Velocity has been weaponized against agility and adaptability.
As Code
🎬 On Prem To the Cloud: Everything As Code
Azure Active Directory
🎬 425 Show: Microsoft Identity IT Pro version 🎬 Microsoft Mechanics: Go passwordless with FIDO2 keys and TAP 🎬 Stuart Kwan - Authentication fundamentals 📃 AAD-Auth-N-Z: Azure Service Authentication and Authorization table (Joosua Santasalo)
Azure AD Conditional Access
📃 Alex Filipin - Conditional Access as Code 📃 Thomas Naunheim - AADOps: Operationalization of Azure AD Conditional Access 📃 Claus Jespersen - Conditional Access Guidance 📃 Daniel Chronlund - Azure AD Conditional Access Policy Design Baseline with Automatic Deployment Support
Azure AD Privileged Identity Management
📃 PS Enable multiple roles at once
Azure AD External Identities, B2B, B2C
🎬 John Savill: What are Azure AD External Identities?
Azure AD SSO to On-premises resources
📃 The case for Azure AD Join (Ru Campbell) 📃 Azure AD and Windows Hello: SSO to on-premise resources – Katy’s Tech Blog (katystech.blog) 📃 Azure AD Join Single Sign-on: follow the key – Azure AD Stuff (stephanwaelde.com)
Azure
📃 Penetration testing
Zero-Trust
📃 A zero-trust future: Why cybersecurity should be prioritized for the hybrid working world 🎬 Must-see! Daniel Stefaniak: “Special Guest Mark Simos - cutting through zero trust BS” (pscp.tv) 🎬 Zero-Trust 1: Implementation 🎬 Zero-Trust 2: Identity 🎬 Zero-Trust 3: Endpoints and Applications 🎬 Zero-Trust 4: Network & Infrastructure 🎬 Zero-Trust 5: Data 📃 Microsoft Digital approach to Zero-Trust networking
Azure Stack
📃 Azure Stack remove network restrictions
Azure Sentinel
🎬 Azure Sentinel Lab Series | EP4 | 100 ways to get data into Azure Sentinel Azure Sentinel Fusion detection for ransomware 📘 Microsoft Azure Sentinel: Planning and implementing Microsoft’s cloud-native SIEM solution 📃 Detect intruders using a honeypot/honeytoken monitored by Azure Sentinel 📃 #365daysofKQL: reprise99/Sentinel-Queries: Collection of KQL queries 📃 How Microsoft moved to Sentinel: “https://customers.microsoft.com/en-us/story/1421616410770801622-microsoft-it-partner-professional-services-azure-sentinel"
Azure Security Center
📘 Microsoft Azure Security Center 📃 Automating remediations from ASC
Azure/M365
🧰 ./Microsoft Portals 📃 Dr Nestori Syynimaa: AASD & M365 kill chain 📃 InfosecMatter: Top 20 Microsoft Azure Vulnerabilities and Misconfigurations
Compliance
📃 Purview: “https://aka.ms/purview" 🎬 Learn how MIP works with Azure Purview at the Azure Data Governance digital event on September 28 - Microsoft Tech Community
Plain, vanilla Active Directory
📃 Dan Cards post-compromise AD checklist
SDLC
📃 Getting security and IR plumbed into your SDLC process Jess Dodson podcast
Learn it all
My all-round Microsoft security guru learn list: Learn Collection Microsoft certs poster “http://aka.ms/youtube/CERT" “https://learn.microsoft.com/" “https://demos.microsoft.com” “https://www.microsoft.com/ignite" “http://aka.ms/CISOWorkshop" “http://docs.microsoft.com/" “https://azsecuritypodcast.net/" - Azure Security Podcast (Michael Howard, Gladys Rodriguez, Mark Simos, Sarah Young) “https://aka.ms/ZTGuide"
🏆 Exam AZ-500: Microsoft Azure Security Technologies 📘 Exam Reference AZ-500 Microsoft Azure Security Technologies 📘 Microsoft Azure Security Infrastructure 📘 Microsoft Azure Architect Technologies and Design Complete Study Guide: Exams AZ–303 and AZ–304
Become a real-life ninja
MCAS “https://aka.ms/mcasninja" Defender for Endpoint “https://aka.ms/mdeninja" Defender for Identity “https://aka.ms/mdininja" Defender for M365 “https://aka.ms/m365dninja" Defender for Office 365 “https://aka.ms/mdoninja" Azure Sentinel “https://aka.ms/asninja" Azure Security Center “https://aka.ms/ascninja" Azure Network Security Ninja “https://aka.ms/ansninja" Azure Defender for IoT “https://aka.ms/d4iotninja" Microsoft 365 Advanced eDiscovery ninja (awaiting aka.ms)
Maersk & notPetya
Brad Smith @ RSA Conference Davos 2017 CEO Report Former CISO Andy Jones account of the event CISO Andy Powell lessons learned from the attack
Digital Transformation
📃 4 ways to build empathy into your processes 📘 The Phoenix Project
Stakeholder management
📃 IDSA: Identity and Access Management, The Stakeholder Perspective
Tool
🧰 BadBlood - fill AD with objects (David Prowe): “https://github.com/davidprowe/BadBlood" 🧰 Mermaid JS - process mapper 📃 Mermaid docs 🧰 Swimlanes.io 🧰 Visio Stencil for Azure icons (David Summers)
Architecture, leadership and influence
📃 Cross Solution Network Architectures (Nehali Neogi) 📃 Awesome List of resources on leading people and being a manager 📘 Robert Cialdini: Influence, New and Expanded: The Psychology of Persuasion 📘 Christopher Hadnagy: Human Hacking: Win Friends, Influence People, and Leave Them Better Off for Having Met You 📃 Cognitive BIAS 📃 How to Create an Effective Technical Architectural Diagram 📃 Recommendations for Adopting a Cloud-Native Key Management Service (Cloud Security Alliance)
Mental health and wellbeing
📃 How To Recover From A Bad Day In 5 Minutes
The Feeds (Where I get my stuffs)
Mark Grimes Identity Top 10: “https://aka.ms/identitytop10"
Twitterers
The Record by Recorded Future
Anything else
The multibillion dollar market for your phones location data.
