Microsoft 365 Defender Ninja Training: January 2021 update

Microsoft 365 Defender Ninja Training: January 2021 update

This article is contributed. See the original author and article here.

To usher in the new year, we are happy to announce a change in the blog name to Microsoft 365 Defender Ninja Training to coincide with the product name change.


Also, in addition to several updates to Microsoft 365 Defender Ninja training, we’ve included a dedicated section focusing on the Solorigate cyberattack to help you defend your environment against this and future supply chain attacks.


 


If you want to refresh your knowledge and get updated, here is what has been added since the last update:


 


Legend:





















vid.png Product videos



webcast.png Webcast recordings



TechCommunity.png Tech Community



docs.png Docs on Microsoft



blogs.png Blogs on Microsoft



GitHub.png GitHub



⤴ External



InteractiveGuides.png Interactive guides


 

 






























Module (ordered by roles SecOps & SecAdmin)



What’s new



Security Operations Fundamentals


Module 1. Technical overview





Security Operations Fundamentals


Module 2. Getting started 





Security Operations Fundamentals


Module 3. Investigation – Incident 





Security Operations Intermediate


Module 2. Investigation 





Security Operations Intermediate:


Module 3. Advanced hunting 





 


The following is not part of the Ninja training, but definitely worth a read:


 










Solorigate




[Guest Blog] Humans of Mixed Reality: It Is No Longer A Science Fiction

[Guest Blog] Humans of Mixed Reality: It Is No Longer A Science Fiction

This article is contributed. See the original author and article here.

This article was written by Mixed Reality and Azure Ranger consultant Adityo Setyonugroho, as part of our Humans of Mixed Reality Guest Blogger Series. Adityo, who is based in Indonesia, shares about his path to Mixed Reality in addition to the community impact of Mixed Reality solutions. 


 


“Science fiction” is probably the most common term most people think of when it comes to holograms. Growing up, I really loved movies and games that featured a lot of hologram-like technology that provided main characters with superpowers to solve challenges and fight their enemies. Who was not amazed by the holographic calls featured on Star Wars or Star Trek movies? Just the thought of being able to look at your friends who live so far away, and see their presence as whole person – not just a headshot – in holographic form just through a call. We knew it was just science fiction back then, but lo and behold, it’s REAL now. This technology exists! I vividly recall how excited I was when I experienced viewing holograms for the very first time, using Mixed Reality technology on the first edition of HoloLens.


 


So, if this technology did not exist before, you might be wondering how I started my journey in the Mixed Reality in the first place. I trace it back to a time where my interest in the transformation of Human Computer Interaction was sparked. While in university, I was excited to have a chance to explore and play around with the Microsoft Kinect v2. I was fascinated by how we can use our body movements and interface with our physical environment to interact with digital assets in various applications. Within that time, I learned more about how we can begin connecting our physical world with the digital world. Through yet more learning and exploring, I then began to learn more about AR and VR, where I tried to develop my first app centered around virtual fitting rooms. It was certainly amusing to be able to see a full suit of (digital) armor overlay on top of my body on the screen.


 


Here’s what it looked like in the early days of experimentation – seems rudimentary, I know:


 

Trial and error building AR dressing appTrial and error building AR dressing app


 

Later on, during my final year in university, I remember watching a Microsoft Windows 10 event and was so amazed by the first HoloLens announcement by Alex Kipman. The concept and implementation of Mixed Reality on HoloLens was really impressive. Many demos were shown: a designer working side-by-side with their working model being displayed around her desk. A woman calling for help to fix her bathroom, making the repair process much more efficient with real-time holographic guidance from an expert over a video call. There was also another HoloLens demo where a woman built a drone inside a holographic workshop, and was then able to 3D-print the model instantly. With time, I found more and more upcoming concepts, use case scenarios and information on the internet about how HoloLens can help various industries to do more with Mixed Reality.


 


My big learning was this: Mixed reality has augmented and enhanced our capabilities as humans. Just like in those early Sci-Fi movies, it was like having superpowers. REAL superpowers.


 


Hololens demo by Alex Kipman and Lorraine BardeenHololens demo by Alex Kipman and Lorraine Bardeen


 


That really inspired me to learn as much as I could about mixed reality, and personally try out the HoloLens experience at that time. Sadly, due to limited product availability, it was difficult for many developers in my region (Indonesia) to get a chance to be hands-on and try such cutting edge technology for themselves. Regardless – I was undeterred, and thankfully the Microsoft HoloLens team made the HoloLens development toolkit and emulator available for us developers to start learning and playing around with HoloLens – all before even owning the actual device! Later on, I joined the global HoloLens Community that created and met with other awesome developers and experts around the world including Jesse McCulloch, Sean Ong, Rene Schulte, Alexander Meijers, Stephen Hodgson, and others, to name a few. These fellow community members really helped spur my learning and growth.  


 


After a year exploring and learning through the emulator while working more stuff on Kinect projects, I finally got a chance to get hands-on experience and development using a real HoloLens! I was amazed by the various Mixed Reality applications that users like me can try, such as the Galaxy Explorer, Fragment, HoloStudio, RoboRaid, and others. The seamless blending of physical and digital worlds never fails to impress me the most – Mixed Reality helps us create game experiences based on real environments and overlay the digital assets interacting with them. Imagine a robot that can show up by breaking your wall, hiding behind your table and couch and getting a real environment effect digitally by shooting around the environment. Games will never be the same again!


 


Roboraid is a Mixed Reality game experienceRoboraid is a Mixed Reality game experience


 


Thereafter, I started to explore Mixed Reality scenarios into real industries beyond just games. I wanted to show customers how Mixed Reality can help them achieve true digital transformation impact. I began working with my friends to start sharing and developing showcases for several industries in Indonesia. My first real customer project was in the construction industry, where we helped them create a Mixed Reality app experience for their BIM data. It is always a joy to see everyone’s reaction during their first Mixed Reality experience. There are so many positive points and ideas that keep coming up on how we can help them transform their work.


 


Here’s a photo from our first industry project:


 


My first Mixed Reality project involving BIM MR experienceMy first Mixed Reality project involving BIM MR experience


 


I truly believe that Mixed Reality creates tangible positive impact to the world on how we can solve many issues faster and more efficiently than before. It enables us to transform and unlock potential use cases across multiple line of business within each industry. Mixed Reality combined with other technologies such as cloud computing, AI, IoT, and others can collectively result in more advanced solutions, transforming daily operations. Mixed reality can be used in healthcare, manufacturing, mining, education, and more. For example, a frontline worker in a manufacturing company might have detected an issue on the manufacturing equipment and needs to resolve urgently. But, this user might not have the right skills to resolve such a specialized issue, and needs help directly from an expert. However, the expert might be not on the site or working remotely — what can the user do then?


 


This is why Mixed Reality comes in.


 


By using real-time expert collaboration powered by mixed reality through Microsoft Dynamics Remote Assist. This way, the user can get help by having a holographic view of essential documents and real-time guidance by the expert while continuing to work heads-up and hands-free on the HoloLens. 


 


Mixed Reality can also enhance the employee onboarding experience, and enable them to upskill more quicker in an immersive manner. There are many other solutions that can be built using Azure cloud to create scalable and connected mixed reality applications.


 


Immersive and connected Mixed Reality solutionImmersive and connected Mixed Reality solution


 


Connected with remote expert with Remote AssistConnected with remote expert with Remote Assist


 


The most important thing in my journey within the Mixed Reality space is Community!


 


Connecting with fellow developers, business makers, industry experts, and others is probably the best part of the journey. Together, we can brainstorm creative ideas and collaborate to make Mixed Reality more impactful to ALL humans around the world. I am so thankful to the global community that has helped me learn, build and scale. We can do so much more when we share ideas with one another!


 


It also inspired me to continue expanding the Mixed Reality community in my hometown of Indonesia and the greater Asia region. My dream is to partner with my friends in the Mixed Reality space to build an entire MR ecosystem and help transform businesses everywhere. We often hold meetups, sharing sessions, hangout discussions, university collaborations to help local communities grow confidence in mixed reality technologies so that they can start to use it as well.


 


MIxed Reality Community Indonesia at Global MR Bootcamp 2019MIxed Reality Community Indonesia at Global MR Bootcamp 2019


 


 


Community x University collaboration on sharing knowledge about MRCommunity x University collaboration on sharing knowledge about MR


 


This is my story so far, but I know my journey in mixed reality is only beginning! I’d love to connect and collaborate with you and others here in the Mixed Reality Community as well. Let’s do great things together!


 


Explore mixed reality and learn more:


 


Microsoft Mixed Reality Docs: Mixed Reality documentation – Mixed Reality | Microsoft Docs


 


Mixed Reality Global Community: https://aka.ms/holodevelopers


 


#HumansofMixedReality #Community #DigitalTransformation

ARM Template Specs is now Public Preview!

ARM Template Specs is now Public Preview!

This article is contributed. See the original author and article here.

TL;DR – Template Specs is a new resource type for storing ARM templates in your resource groups for faster sharing, deployment, and role-based access control (RBAC) on those Templates shared within an organization. Template Specs addresses today’s biggest challenges around ARM template management, storage, and access.


 


The Problem: Sharing ARM templates across an organization is challenging, requiring more management steps of the external or internal storage from which they are shared.



  • Sharing: ensuring the right teams within your organization have access becomes very tedious as you cannot leverage Azure RBAC on the ARM templates you want to share.

  • Management: providing teams with the latest ARM templates in a consistent and versioned way.


 


Why Template Specs?


As a native solution, Template Specs will enable users to bring all their ARM templates to Azure as a resource and securely store and share them within an Azure tenant. 


 


The Solution: 1st Party secure storage and management of ARM templates within Azure.



  • Sharing: Who can access a Template Spec can be defined using Azure RBAC.

  • Management: Template Specs can be versioned within the same resource, ensuring users can always access the latest iterations of an ARM template (or templates) stored in a Template Spec.


 


Template Spec Reference and Docs:



Note:  Below references show how Template Specs can be created with an ARM template, but we strongly recommend using Portal, PowerShell or CLI for creating Template Specs.



Creating and Deploying a Template Spec Resource


A Template Spec is a resource that contains an array of Template Spec versions which consists of a root template and any number of linked templates. A Template Spec can be created using the Portal, PowerShell, Azure CLI, REST API, or ARM Template. To help visualize a Template Spec create, here are some examples of what it would look like in the Azure CLI:


 


Creating a Template Spec using Azure CLI


To create a Template Spec, use the az ts create command to package an ARM into the Template Spec resource.


 


 


 

az ts create --name webAppSpec --version "1.0" --resource-group rgName --location "westus2" --template-file "azuredeploy.json"

 


 


 


Required properties:



  • –name: The name for the Template Spec resource.

  • –version: The version number or name of the version being created.

  • –location: The Azure region for the Template Spec resource.

  • –template-file: The ARM template to be packaged into a template spec.


Creating and Deploying a Template Spec with Linked Templates using Azure CLI


To create a Template Spec with artifacts inside it, we need the following:



  1. Create main template (e.g. azuredeploy.json) that deploys linked templates, to be passed into the az ts create command as a template file.

  2. Create N number of deployment resources with linked templates referenced using the relativePath property within the templateLink object.apclouds_3-1611777032592.png

    In this example the linked templates are stored in a subfolder called artifacts, which is in the same path as the main template file. The relativePath property is relative to the template file where relativePath is declared. The relativePath property can take any of the following values:



    • ./artifacts/storagelinkedTemplate.json

    • /artifacts/storagelinkedTemplate.json

    • artifacts/storagelinkedTemplate.json


     


    Note: relativePath can also be used deploy remote linked templates given all template files are staged together and available via remote URI, such as GitHub or Azure storage. The main template is called by using URI and all linked templates referenced as relative to that main template will have a URI constructed using the main template URI and the relativePath specified. This feature requires api version 2020-10-01 or greater. To learn more about this feature, please refer to Link templates for deployment – Azure Resource Manager | Microsoft Docs.




  3.  Run the az ts create command to create or update a template spec version. This command packages the linked templates added via templateLink as artifacts in your Template Spec version. 

    az ts create --name webAppSpec --version "1.0" --resource-group rgName --location "westus2" --template-file "azuredeploy.json"​

    This command packages the template file azuredeploy.json into the main template of the Template Spec version webAppSpec-1.0 and all linked templates specified into the artifacts[] array of the Template Spec object.




  4.  Deploy the Template Spec by passing in its resource ID using the  az deployment group create command. First, we need to get the ID of the Template Spec resource created, and this can be done easily in the Azure CLI by using the az ts show command:

    id=$(az ts show --name webAppSpec --version "1.0" --resource-group rgName --query "id")


  5.  Verify the contents of a Template Spec by running the az ts export command that downloads a specified Template Spec version into an –output-folder in your local file system.

    az ts export --output-folder "C:exported-template-specs" -s "template-spec-version-ID"

    This command exports the specified Template Spec’s main template (e.g. webAppSpec.JSON) and an artifacts folder with all of its corresponding template artifacts. You can also view the contents of a Template Spec version can also be seen using the Azure Portal.


     


    apclouds_1-1611779638060.png


 


Deploying a Template Spec as Linked Template using ARM Template with ID Reference


A Template Spec resource can also be referenced using the templateLink property and specifying the id of the template spec:


apclouds_0-1611781075709.png


References and Docs



We look forward to feedback and seeing you succeed on Azure with ARM Template Specs. Please feel free to reach out with any questions at angperez@microsoft.com on Twitter, or GitHub.

PostgreSQL to Azure DB for PostgreSQL – Hyperscale (Citus) online migrations now generally available

This article is contributed. See the original author and article here.

 


We are pleased to announce general availability of Azure Database Migration Service support for online (minimal downtime) migrations of PostgreSQL to Azure Database for PostgreSQL – Hyperscale (Citus). Azure Database Migration Service provides a single service that customers can use to migrate data from different database engines to Azure, all with built-in resiliency and robustness.


 


With online migrations, businesses can migrate their databases to Azure while the databases continue to be operational. This means that migrations can be completed with minimum downtime for critical applications, limiting the impact to service level availability and inconvenience their end customers.


Additional updates to the PostgreSQL to Azure Database for PostgreSQL migration scenario with this release include support for:



  • All PostgreSQL versions from 9.4 through 11.

  • Migrating to a higher version of PostgreSQL; there is no longer a requirement that minor versions of PostgreSQL match on the source and target.

  • Migrating from an AWS RDS Aurora Postgres version 10.6 or later database.

  • The BSON and ENUM data types.


We’ve also removed the:



  • Superuser privilege requirement; now, only the replication privilege is required.

  • Password string limitation regarding use of curly braces.


For more information about using Azure Database Migration Service to migrate data to Azure Database for PostgreSQL, see the following tutorials:



Azure Database for PostgreSQL – Hyperscale (Citus)


Azure Database for PostgreSQL – Hyperscale (Citus) transforms your Postgres database into a database that can scale up and down as well as scale out horizontally. Powered by the Citus extension, the service provides you with all the native capabilities of Postgres, including rich JSON support, powerful indexing, an array of datatypes, full text search, geospatial support, and much more. Because Citus is an extension to Postgres and doesn’t fork from the main project, you can stay current with your Postgres versions without worry about your infrastructure gradually fading into legacy mode.


For more information about Azure Database for PostgreSQL – Hyperscale (Citus), see the related service documentation.

Spotlight on the ADX Web Explorer query results grid

Spotlight on the ADX Web Explorer query results grid

This article is contributed. See the original author and article here.

The ADX Web Explorer results grid is not just our way to display your query results, but it is a powerful data exploration tool set, that allows you to create various views of your data and quickly draw insights.


Become more productive today! Read this article to learn how it works.


 


In this article you’ll learn how to use the following result grid productivity tools:



  • Expand cell and JSON format

  • Expand row

  • Column grouping

  • Column filters

  • Cell to query filter

  • Pivot mode

  • Cell statistics


Get set, ready, go!


 


Expand Cell


When dealing with long strings or dynamic fields such a JSON, cell expand functionality comes in handy.


Double clicking a cell opens an expanded view that allows you easily read long strings, and provides a JSON formating for dynamic data.


 


expanded cell.png


 


You can choose between 3 reading pane modes for expanded view, inline (like in above picture), right pane, and bottom pane. Use the icon on the top right of the result grid to switch reading pane modes.


 


 reading pane.png


 


The expanded mode is dynamic, allowing you to expand and collapse array items, and supports full in cell search. to search in a dynamic cell, expand it and hit ctrl+f to search it’s contents (in the image below expanded view is opened in right pane mode):


 


search in cell.png


 


Expand Row


When approaching a table with dozens of columns it can save you time to expand the entire row for a single glance overview of the different columns and their content. I can assure you it beats endless scrolling to the right.


Click on the arrow (>) on the left of every row to expand it.


Expand row view is optimal when used with right reading pane mode.


 


expanded row.png


Column grouping


Column level grouping allows you to run a quick on-the-fly analysis on your query results by grouping the results table by distinct values of the selected column.


To use column grouping mouse-over a column, select the menu, and select Group by <column name>.


 


OlgaGold_4-1611771271151.png


 


The table will be grouped by distinct values of the selected column. Double-click a group or click on the arrow (>) on the right of each group to expand the grouping to display related records.


 


OlgaGold_5-1611771271153.png


 


This feature is great for exploratory analysis.


 


To reset the grid to its original state mouse-over the Group column, then select Reset columns.


 


OlgaGold_6-1611771271154.png


 


 


Column filters


The ADX column filter feature introduces a powerful set of multi condition filters to allow you create complex filter logic on your pre-rendered results.


To use column filters mouse-over a column, select the menu, and then select the filter icon.


 


filter icon.png


 


In the filter builder select the desired operator:


 


filter selection.png


 


Now type in the expression you’re wish to filter the column on (note that the filter is not case sensitive)


To create a multi-condition filter select a boolean operator to add additional condition


 


multi condition filter.png


 


Results are filtered as you type in.


 


To remove the filter simply delete the text from your first filter condition.


 


Cell content to query filter


Another easy way to filter the grid, is to add a filter operator to the query directly from the grid.


Select a cell with content you wish to create a query filter for.


Right click to open the cell actions menu. Select Add selection as filter


 


cell to filter 1.png


 


A query clause will be added to your query in the query editor:


 


cell to filter.png


Pivot mode


Pivot mode feature is somewhat similar to Excel’s pivot table, enabling you to do advanced analysis in the grid itself.


Pivoting allows you to take a columns values and turn them into columns. For example you can pivot on State to make columns for Florida, Missouri, Alabama, etc.


Pivoting only makes sense when mixed with aggregation. If you turn a column into a pivot column, you must have at least one aggregation (value) active for the configuration to make sense. For example, if pivoting by State, you must provide something you are measuring such as ‘DamageProperty’ per state.


To enable it click on the Columns menu on the right


 


OlgaGold_13-1611771271197.png


 


Now select Pivot Mode and drag and drop columns into the appropriate fields below:



  • Row Groups – allows grouping by different columns.

  • Values – aggregated data (supports SUM operator).

  • Column labels – allows turning column values into columns and enables another level of grouping.


 


pivot mode.png


 


The result should look like the following pivot table;


Sum of all damage to property grouped by event type and displayed per country:


 


pivot table output.png


 


Search in results


Search in results enables you to look for a specific expression within the entire results table.


Click on the Search button on the right and type in the expression you’re looking for.


 


search1.png


 


All mentions of your searched expression are now highlighted in the table. You can navigate between them by clicking Enter to go forward or Shift+Enter to go backward, or you can use the up and down buttons next to the search box.


 


search 2.png


 


Cell statistics


Cell statistics helps you to run quick calculations on numeric data in your grid.


Calculations such as MIN, MAX, AVG, SUM and COUNT.


To use this feature, select a few numerical cells. The grid allows you to select multiple rows, columns, and cells.


The calculated statistics will appear on bottom left of the grid.


 


OlgaGold_10-1611771271186.png


 


Want to learn more about the ADX Web Explorer and have a hands on experience?


Use this guide to learn more.