Notes on securing Azure estates. Networking, identity, Entra ID and M365, with a good deal of KQL. No fluff, mostly Bicep. Yes, really.
$ ls -lt ./posts — 4 entries
2026-09-02
Your DNS policy? My DNS Policy
5 min
2026-09-02
When a foreign Private DNS zone answers inside your VNet
11 min
2026-09-02
Cross-tenant DNS forwarding in Azure: plumbing that should not work?
7 min
2026-08-12
Private Endpoints for Azure Storage: closing the public front door
2 min
total 4 · nothing older. this blog started in 2026.