PowerShell encoded execution, a risk?
Bart Pasmans Welcome back! Wow, last blog was really well read by the community and I received a lot of positive feedback! So time to do some more with PowerShell and security!…
Cloud | Security
PowerShell as Hack – Keylogging
Welcome back, and today something out of my own comfort zone. Today I will show you how PowerShell can be used for hacks. This is not to teach you how…
Mastering PowerShell Diagnostics with Set-TraceSource
If you’ve been following my blog, you know I’m passionate about automation, observability, and building maintainable PowerShell solutions. Today, we’re diving into something that every advanced scripter should use, but…
No More Secrets! Passwordless Azure SQL
Lately I’ve been focussing a lot on PowerShell related blogs and topics, so I thought it would be a good moment to go back to some Azure stuff again (and…
🚀 New Release: AzPolicyCompare – A PowerShell Module for Azure Policy Initiative Comparison
I’m excited to announce the release of AzPolicyCompare, a PowerShell module I’ve developed to help Azure professionals compare Azure Policy Initiatives with ease. Managing and aligning policies across multiple initiatives…
Pre-Auth/Easy Auth with Azure App Services & downstream token setup with a custom API
Azure App Services by default are open to the public, allowing external connections to your trusted app. Sometimes setting the status of your App Service from public to ‘private’ is…
Managed Identity and GRAPH permissions
Many Azure resources support the configuration of managed identities which help you grant permissions to your resource(s). For instance, you need to grant your WebApp permissions to KeyVault to get…
Securing your Azure Functions
Azure Functions can be of great benefit to your automation flows! They can get data and perform business logic on request. They can even connect to your on-premises environment on…
A single public outbound IP for Azure (app) resources!
I regularly run into situation where PaaS resources are used which require external connectivity. For example, to API’s or to third party services that use whitelisting to allow only certain…