Defending the Cloud: Securing Your Microsoft Data Workloads
summary
Shows a live honeypot VM exposed to the internet that immediately attracts automated scans (FTP, SSH, RDP, SQL, common username/passwords) proving misconfiguration risk; demos use Azure tooling (Defender for Cloud secure score, Microsoft Purview data discovery) and maps controls to the NIST CSF and the Microsoft Cloud Security Benchmark. Covers Fabric vs. Azure PaaS differences: which responsibilities shift to Microsoft, where to apply private endpoints, conditional access, identity secure score, and backup/DR options — demo traffic appears in real time.
AI-written summary · about
chapters (18)
- 0:00Securing Microsoft data workloads
- 1:53Cloud adoption and security challenges
- 3:59Cloud honeypot demo and attack vectors
- 5:46NIST framework for data security
- 9:18Shared responsibility model
- 10:04Azure data platform architectures
- 12:09Fabric as SAS security
- 14:01Cloud Security Benchmark overview
- 17:10Asset risk for data platforms
- 18:11Data protection controls
- 21:00Identity and zero trust
- 25:36Endpoint and privileged access
- 26:41Network security and attack surface
- 29:52DevOps security practices
- 34:19Logging and threat detection
- 35:46Incident response and recovery
- 37:53Governance and policy
- 40:20Resources and Q&A
related talks
48mLateral Movement in the Age of Hybrid Cloud
31mA Comprehensive Approach to Cloud Security Posture Management
54mCloud & Hybrid Workload Protection using Azure Defender
50mSecuring Native Cloud Application Perimeter
55mWhat you need to know about security for cloud DevOps
56mEnter the Matrix: Securing Azure’s Assets
56mHack the Cloud Hack the Company: the Cloud Impact on Enterprise Security
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask