The Curious Engineer

All blogs / Security

Core Infrastructure and Security Blog

techcommunity.microsoft.com/category/cis/blog/coreinfrastructureandsecurityblog

SecurityDevOps / SRE / infrastructureNetworkingMicrosoft blogsMicrosoft Tech Community

’18’19’20’21’22’23’24’25’26
Posts
2,310 from 19 Sep 2018 to 29 Oct 2026
Posting
weekly (92 in the last year)
Kind
company blog

Latest

October 2026

  1. AKS Pod Scheduling Demystified
  2. Bracing for BlockNtlmv1SSO
  3. Where Does My Microsoft Entra ID Data Reside? Understanding Azure Regions and Data Residency
  4. Check This Out! (CTO!) Guide (October 2026)
  5. Finding the Elusive MDE PUA Audit Events on Linux

September 2026

  1. From Domain Lists to Decisions: Scaling WHOIS Threat Intelligence with MDTI and Microsoft Graph
  2. Updating Purview DLP Sensitive Service Domain Groups with PowerShell
  3. CoreDNS in AKS: service discovery, upstream DNS, and failover
  4. Locking down PAWs internet access when GSA drops
  5. Securing Your Certification Authorities (Practical PKI Part 4)
  6. Check This Out! (CTO!) Guide (September 2026)
  7. TysonPaul
  8. MDATP Linux agent latest release reporting

August 2026

  1. Unified AI Defense: Security Copilot, Project Perception, and MDASH
  2. Check This Out! (CTO!) Guide (August 2026)

July 2026

  1. Securing Enterprise AI Agents with Microsoft Sentinel
  2. Device Code Flow: The Gift That Keeps on Giving — To Attackers
  3. Understanding Microsoft 365 Copilot Risk Surface and Mitigations
  4. Should You Use the New Microsoft Entra Tenant Governance or Azure Lighthouse? (part 3 of 3)
  5. Azure Lighthouse: Bring Your Partner In, Without Letting Their Identities In (part 2 of 3)
  6. Customer Offerings: Solution Optimization for GitHub Copilot
  7. Hunting Local AI Tools on macOS with Microsoft Defender for Endpoint
  8. Check This Out! (CTO!) Guide (July 2026)
  9. When Arc Goes Silent: Turning Visibility Gaps into SOC Action
  10. Azure Database Security Newsletter - July 2026
  11. Turning Azure Policy Signals into Actionable Governance Insights
  12. Windows 365 Boot
  13. Building C# and C++ Apps with GitHub Copilot CLI and Visual Studio 2026

June 2026

  1. Authenticating AWS Workloads to Azure Functions using Workload Identity Federation
  2. Check This Out! (CTO!) Guide (May/June 2026)
  3. Microsoft Security Copilot: AI-Driven Security Operations at Greater Scale
  4. Security Copilot RBAC for Embedded Experience in Unified Security Platform
  5. Automating Daily MDE Compliance Monitoring Across Azure VMs
  6. Analyse Intune Diagnostics Logs with GitHub Copilot
  7. At-Scale Failure Reporting for Azure Update Manager

May 2026

  1. Redefining Security for an AI Driven World
  2. Build a Local Microsoft Sentinel Triage Agent in VS Code (Copilot + MCP)
  3. TLS Certificate Pinning and Best Practices in Azure Open-Source Relational Databases
  4. Check This Out! (CTO!) Guide (April 2026)
  5. Triggering Azure Functions from Blob Storage Using Event Grid
  6. Purpose For Your PKI (Practical PKI Part 3)

April 2026

  1. Hardening OpenClaw on AKS: Mitigating Container Escapes with Kata microVM Isolation
  2. How to Manage RC4 Hardening – Definitive Guide
  3. Extracting and Auditing Azure DevOps Permissions at Scale with PowerShell
  4. Designing Outbound Connectivity for "Private Subnets" in Azure
  5. Strengthening Identity Resilience: A Deep Dive into Microsoft Entra Backup and Recovery
  6. Running multimedia AI models on Container Apps with Serverless GPU (A100 & T4)
  7. Maintaining Azure Public IP Inventory by Retrieving Exact Deleted Public IP Using Activity Logs
  8. Microsoft Defender for Endpoint (MDE) — Custom Role Design for Troubleshooting Mode–Only Access
  9. Customer Offerings: Azure Local - Implementation, Migration, and Management
  10. Customer Offerings: Hyper-V - Implementation, Migration, and Management
  11. Auditing FIDO2 authentication for Windows Sign-in
  12. Azure Database Security Newsletter - April 2026

March 2026

  1. Check This Out! (CTO!) Guide (March 2026)
  2. Implementing Intune RBAC and Scope Tags for Zero Trust and Least Privilege
  3. What Changed in RC4 with the January 2026 Windows Update and Why it is Important
  4. Remove Unnecessary Azure Storage Account Dependencies in VM Diagnostics
  5. Bulk enable Azure Arc Connected Machine Agent Automatic Upgrade (Tag Scoped) with Azure Cloud Shell
  6. Check This Out! (CTO!) Guide (February 2026)
  7. The Nightmare of renewing NDES Enrollment Agent Certificates
  8. The Future of Identity: Self-Service Account Recovery (Preview) in Microsoft Entra
  9. Demystifying the Client Repeatable Feature in Edge

February 2026

  1. Running Text to Image and Text to Video with ComfyUI and Nvidia H100 GPU
  2. Managed Identity on SQL Server On-Prem: The End of Stored Secrets
  3. Windows Hello for Business - Registered Methods and Last-used Method
  4. Check This Out! (CTO!) Guide (January 2026)
  5. Implementing Azure Lighthouse: A Technical Guide for Service Providers and Enterprises (part 1 of 3)
  6. CRL & AIA Publishing Guidance (Practical PKI Part 2)
  7. TLS 1.3 in SQL Server 2025: What It Really Changes for Security

January 2026

  1. Splitting single-tenant Microsoft Defender XDR Sentinel logs in multiple company scenarios
  2. Conditional Access for Agent Identities in Microsoft Entra
  3. “Automating Export of Microsoft Sentinel Analytic Rules mapped to MITRE Tactics & Techniques”
  4. GitHub Copilot + SQL Server: Understanding the Security Analyzer
  5. Determine Defender for Endpoint offboarding state for Linux devices
  6. Run a SQL Query with Azure Arc
  7. Active Directory Hardening Series - Part 8 – Disabling NTLM
  8. Determine Defender for Endpoint offboarding state of Windows machines using PowerShell
  9. Azure Database Security Newsletter - January 2026
  10. Check This Out! (CTO!) Guide (December 2025)
  11. OPNsense Firewall as Network Virtual Appliance (NVA) in Azure

December 2025

  1. Understanding Windows Settings URIs and How to Use Them in Enterprise Environments
  2. Automating Windows Server Licensing Benefits with Azure Arc Policy
  3. Empower Your Cloud Identity: How to Convert User SOA from AD to Entra ID
  4. Empower Your Cloud Identity: How to Convert User SOA from AD to Entra ID
  5. Bulk Device Tagging in MDE: PowerShell & API Approach
  6. Check This Out! (CTO!) Guide (November 2025)
  7. Implementing and Managing an ADCS Offline Root Certificate Authority (Practical PKI Part 1)

November 2025

  1. Using the Microsoft Defender for Endpoint Files API to Validate Malware Hashes
  2. MDE for Non‑Persistent VDI — Implementation Guide & Best Practices.
  3. Platform SSO for macOS
  4. Check This Out! (CTO!) Guide (October 2025)
  5. Update Coverage Workbook in Microsoft Defender for Cloud to Include Defender for AI Plan status

October 2025

  1. Using Microsoft Sentinel MCP Server with GitHub Copilot for AI-Powered Threat Hunting
  2. Ollama on HTTPS for SQL Server
  3. Subscription Governance: The Relationships and Dependencies Involved with Managing Subscriptions
  4. Identify Device state in EntraID/Defender with PowerShell
  5. Secure Configuration and Hardening of Active Directory Certificate Services
  6. Automating VMware to Hyper-V Migration with SCVMM
  7. Applying DISA STIG Settings with Microsoft Intune: Overcoming Native Limitations
  8. Check This Out! (CTO!) Guide (September 2025)
  9. Solving Network Connectivity for MDE and MDI
  10. Detecting and Alerting on MDE Sensor Health Transitions Using KQL and Logic Apps
  11. Managing Hotpatching for Azure Arc connected Machines using APIs

September 2025

  1. Optimizing Microsoft Sentinel: Resolving AMA-Induced Syslog & CEF Duplicates
  2. Entra Group Source of Authority CONVERSION: Enabling Cloud-First Identity Management
  3. Check This Out! (CTO!) Guide (August 2025)
  4. Windows 365 Link – Deployment Planning, Setup and Enrollment
  5. Update Entra ID Device Extension Attributes via PowerShell & Create Dynamic Security Groups.

August 2025

  1. Transforming Enterprise AKS: Multi-Tenancy at Scale with Agentic AI and Semantic Kernel
  2. Ingesting .CSV log files from Azure Blob Storage into Microsoft Sentinel
  3. Identify Defender for Endpoint Onboarding Method using PowerShell - Part 2
  4. Using Entra ID Authentication with Arc-Enabled SQL Server in a .NET Windows Forms Application
  5. Gpresult Like Tool For Intune
  6. Issuing Custom Claims Using Directory Extension Attributes in Microsoft Entra ID
  7. Azure App Service Domain module for Terraform
  8. From Healthy to Unhealthy: Alerting on Defender for Cloud Recommendations with Logic Apps
  9. Optimize Azure Log Costs: Split Tables and Use the Auxiliary Tier with DCR
  10. Check This Out! (CTO!) Guide (July 2025)

July 2025

  1. Check This Out! (CTO!) Guide (June 2025)
  2. Determine Onboarding Methods in Defender for Endpoint - Part 1
  3. Microsoft Defender for Endpoint (MDE) Live Response and Performance Script.
  4. Creating Custom Intune Reports with Microsoft Graph API
  5. Securing Kubernetes Applications with Ingress Controller and Content Security Policy

June 2025

  1. Azure Arc and Defender for Servers: Connectivity and Monitoring Script
  2. Enabling Extended Security Updates (ESU) for Windows 10 with Intune
  3. Making the Most of Attack Simulation Training: Dynamic Groups, Automation, and User Education
  4. Best Practices for Investigating Phishing Incidents in Microsoft Defender for Office 365
  5. Introduction to Network Trace Analysis 06: Kerberos it’s AUTH-some!
  6. Check This Out! (CTO!) Guide (May 2025)
  7. Understanding Device Control for macOS in Defender for Endpoint

May 2025

  1. Protect Tier 1. Sleep well at Night.
  2. Demystifying Anomaly Detection in Microsoft Sentinel using KQL
  3. Sentinel-Threat Intelligence Feeds Integration to strengthen Threat Detection & Proactive Hunting.
  4. Migrating BitLocker Recovery Key Management from ConfigMgr to Intune: A Practical Guide
  5. Sentinel Notebook: Guided Hunting - Domain Generation Algorithm (DGA) Detection
  6. Check This Out! (CTO!) Guide (April 2025)
  7. Check This Out! (CTO!) Guide (March 2025)
  8. How to easily apply DISA STIGs with Intune

April 2025

  1. Managing PAC Script Configuration in Microsoft Edge
  2. Configure App-V Server to use HTTPS
  3. How-To Use Graph Object Change Notifications
  4. How to identify Azure resources using default outbound Internet access?
  5. Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)
  6. Ingest Custom Data into Azure Log Analytics via API Using PowerShell

March 2025

  1. Passwordless Authentication with FIDO2 Security Key for Remote Desktop Connection
  2. Microsoft Entra HR and Inbound Provisioning – World’s Best Boss Edition
  3. Azure Monitor: How To Create Overrides for Log Search Alerts
  4. Life After APP-V Server: Exploring Options for Application Streaming and Delivery
  5. Deprecation of Microsoft Defender Application Guard: Transitioning to Enhanced Security Solutions
  6. Application Control for Business, Schema Definition

Every year

2026 802025 952024 682023 1222022 682021 1072020 2882019 1,0622018 420