Automate(d) security with Azure Security Center
summary
Demonstration shows Azure Security Center using REST APIs, Postman and the Secure Score API (returns 22.92 points — 40.93% of 56) plus Continuous Export to Event Hub/Log Analytics and Workbooks built from Log Analytics and Resource Graph. A simulated successful SSH brute‑force against a Linux VM generates an alert that fires a workflow automation trigger, calls management.azure.com to enumerate VM, NIC and NSG, and creates NSG deny rule (priority assigned automatically), proving automated containment works end to end.
AI-written summary · about
chapters (23)
- 0:00Intro
- 0:25Poll
- 1:35Agenda
- 2:27Should I skip
- 2:57Azure Security Center
- 4:46Azure Security Benchmark
- 9:31Governance
- 11:56Protection
- 12:39Azure Defender
- 15:56Automations
- 16:43REST APIs
- 19:11How APIs work
- 20:17Integrate with thirdparty applications
- 21:29Postman Demo
- 25:56Continuous Export
- 27:53Workbooks
- 30:41Building a workbook
- 32:09Querying logs
- 35:20Custom dashboards
- 35:59Logic Apps
- 36:54Connectors
- 38:08Workflow Automation
- 46:37GitHub Community
related talks
50mAutomating security monitoring
53mAzure Security Center - Your CSPM & CWPP
01h 02mAzure Identity and Security
43mDefending the Cloud: Securing Your Microsoft Data Workloads
28mSecure your cloud automation
35mContinuous Cloud Security Automation
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask
33mModernize Your Security Operations With Azure Sentinel