👺Azure Security Project Lab

This is Azure basics to Advance security Lab project in different modules wise.

Overview

This project contains basics like perimeter as security to monitoring events, Threat Hunting using Microsoft CNAPP tools and SIEM and SOAR use cases. All labs and ARM/automation templates are as per my own lab performed, read instructions before using it.

It contains both major and minor project. Major project means end to end implementation, Security Best Practices, Frameworks etc. And Minor project means Services Baseline implementation

Projects

Managing Resources inside Azure

Implementation of RBAC

Implementation of Network & Application Security

Implementation of Perimeter Security

Securing Storage Account & DB

Securing Secrets using Azure Key Vaults

Implementation Platform Protection

Implementation of Zero Trust Architecture

Managing Security Operations

Implementation of CSPM,CSWP,CNAPP,CWP

Implementation of SIEM and SOAR

Detection and Threat Hunting

Posture & Vulnerability Management

Endpoint Security

Threat Modelling

Integrate Security into the Development Process

Shift Left Approach

Securing DevOps CI/CD pipeline

Secrets Scanning using MDC

CASB implementation

Implementation of MCRA

Implementation of Azure Security Benchmarks

Information Protection

  • Microsoft Purview Intro

  • Data Life cycle

  • Data Loss Prevention (DLP)

  • Data classification & Governance

  • Handling sensitive information type

  • M365 encryptions

  • Microsoft Message purview encryption

  • Protect Information in Microsoft Purview

  • Sensitive label management

  • Data Loss prevention in MS Purview

  • Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform

  • Manage data loss prevention policies and reports in Microsoft 365

  • Manage the data lifecycle in Microsoft Purview

  • Manage data retention in Microsoft 365 workloads

  • Manage records in Microsoft Purview

Service Base Line

Network Security Asset ManagementEnd Point Security

Identity Management

Logging & Threat Detection

Backup & Recovery

Privilege Access

Incident Response

DevOps Security

Data Protection

Posture & Vuln Management

Governance Strategy

Demo

Last updated