CyberCode Academy

CyberCode Academy

By CyberCode AcademyTechnologyEducationCourses
Download on the App Store

CyberCode Academy episodes

  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 10: Azure Security Monitoring and Threat Response
    In this lesson, you’ll learn about managing security operations and advanced threat protection in Microsoft Azure:Vulnerability Management & Governance
    • Identifying and remediating weaknesses:
      • Qualys for vulnerability scanning
    • Enforcing security standards through:
      • Azure Security Center policies
      • Grouping policies into initiatives
      • Assigning them at management group level for consistency
    Access Control & Attack Surface Reduction
    • Implementing Just-in-Time (JIT) VM access:
      • Keeping management ports (RDP / SSH) closed by default
      • Opening access only when requested and for a limited time
    • How it works:
      • Temporarily creates NSG rules
      • Automatically removes them after access expires
    • Benefits:
      • Reduces exposure to brute-force attacks
      • Minimizes attack surface
    Threat Detection & Alerting
    • Using Security Center for behavioral analytics and threat intelligence
    • Detecting suspicious activities such as:
      • Use of hacking tools
      • Unauthorized processes or anomalies
    • Managing alerts:
      • Categorized by severity levels
      • Grouped into security incidents for full attack visibility
    Advanced Security Operations (SIEM & SOAR)
    • Leveraging Microsoft Sentinel:
      • SIEM (Security Information & Event Management):
        • Collecting and analyzing logs at scale
        • Correlating events across systems
      • SOAR (Security Orchestration, Automation, and Response):
        • Automating responses using playbooks
        • Built on Azure Logic Apps
    • Key capabilities:
      • Threat hunting using advanced queries
      • Automated incident response workflows
      • Centralized security operations
    Hands-On Implementation
    • Configuring:
      • Security policies and initiatives
      • JIT access for VMs
      • Alert rules and incident tracking
    • Onboarding resources into Sentinel:
      • Connecting data sources
      • Triggering and investigating alerts
      • Automating remediation
    Key Takeaways
    • Security operations visibility + automation + control
    • JIT access significantly reduces attack exposure
    • Security Center provides threat detection and posture management
    • Microsoft Sentinel enables full SOC capabilities in the cloud
    This lesson strengthens your ability to detect, respond, and automate security operations while aligning with AZ-500 exam objectives.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    23 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 9: Mastering Azure Security Operations
    In this lesson, you’ll learn about managing security operations and monitoring in Microsoft Azure:Azure Monitor Fundamentals
    • Using Azure Monitor as a centralized platform for telemetry collection and analysis
    • Understanding the difference between:
      • Metrics → Near real-time numerical performance data
      • Logs → Detailed records analyzed using Kusto Query Language (KQL)
    Logging & Data Analysis
    • Azure Activity Logs:
      • Track control plane operations (e.g., resource creation, role assignments)
    • Azure Resource Logs:
      • Provide deep insights into resource-level operations
    • Configuring diagnostic settings to:
      • Export logs to Log Analytics Workspace
      • Enable long-term storage and advanced querying
    Proactive Alerting
    • Creating alert rules to detect critical events
    • Using action groups to:
      • Send notifications (email, SMS, webhook)
      • Trigger automated responses
    • Monitoring sensitive actions such as:
      • Changes to Azure Policy assignments
      • Assigning high-privilege roles (Owner)
    Infrastructure Security Management
    • Using Azure Security Center (Microsoft Defender for Cloud)
    • Key features:
      • Secure Score:
        • Measures and improves security posture
      • Regulatory Compliance Dashboard:
        • Tracks compliance with standards like ISO 27001 and PCI DSS
    Hands-On Security Operations
    • Connecting Windows & Linux VMs to monitoring tools
    • Generating and analyzing security events
    • Performing automated remediation to fix vulnerabilities
    Key Takeaways
    • Azure Monitor provides full visibility into performance and security events
    • Logs and metrics are essential for detection, investigation, and response
    • Alerts enable proactive security operations
    • Security Center helps maintain continuous compliance and posture improvement
    This lesson equips you with the skills to monitor, detect, and respond to threats effectively while preparing for the AZ-500 certification.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    25 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 8: Governance and Container Security
    In this lesson, you’ll learn about Azure platform protection and governance strategies in Microsoft Azure:Azure Resource Manager (ARM)
    • Understanding Azure Resource Manager (ARM) as the control plane for Azure
    • Managing all resources through a single, consistent API
    • Ensuring standardized deployment, access, and configuration across environments
    Access Control with Custom Roles
    • Extending RBAC with custom roles:
      • Defined using JSON
      • Granting fine-grained permissions
    • Example use case:
      • Allow restarting a VM without permission to delete it
    Resource Protection Mechanisms
    • Using Resource Locks to prevent accidental changes:
      • Read Only → No modifications allowed
      • Cannot Delete → Prevents deletion
    • Applying locks across:
      • Users
      • Roles
      • Subscriptions
    Policy Enforcement with Azure Policy
    • Using Azure Policy to enforce compliance
    • Controlling resource properties instead of user actions
    • Common policy use cases:
      • Restricting deployments to approved regions
      • Blocking risky configurations (e.g., public IPs on internal VMs)
      • Enforcing organizational standards
    Container & Compute Security
    • Securing Azure Kubernetes Service (AKS):
      • Integrating with Azure AD for identity control
      • Using pod identities for secure service access
      • Applying network policies to control pod-to-pod traffic
    • Strengthening container security:
      • Enforcing least privilege
      • Isolating workloads
      • Managing secrets securely
    Vulnerability Management
    • Scanning container images and running workloads for vulnerabilities
    • Leveraging third-party tools such as:
      • Aqua Security
      • Twistlock
    • Ensuring:
      • Continuous monitoring
      • Secure image pipelines
      • Runtime protection
    Exam Preparation & Key Concepts
    • Reinforcing knowledge with AZ-500 exam scenarios
    • Key focus areas:
      • Azure Update Management
      • Docker Content Trust
      • Governance vs access control differences
    Key Takeaways
    • ARM provides centralized and consistent resource management
    • Governance is enforced through roles, locks, and policies
    • Container and compute security require identity, isolation, and monitoring
    • Platform protection depends on combining control, visibility, and enforcement
    This lesson marks a major milestone in mastering Azure platform protection, covering critical concepts required for both real-world security and the AZ-500 certification.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    23 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 7: A Comprehensive Guide to Virtual Machine and Container Security
    In this lesson, you’ll learn about securing infrastructure and application workloads in Microsoft Azure, with a focus on Virtual Machines and containerized environments:Virtual Machine (VM) Security
    • Understanding the shared responsibility model:
      • Azure secures the cloud
      • You secure the OS, applications, and configurations
    • Key security practices:
      • Endpoint Protection:
        • Using Microsoft Antimalware or third-party solutions
      • OS Hardening:
        • Applying Center for Internet Security benchmarks
        • Disabling unnecessary services and tightening permissions
      • Identity Management:
        • Using Managed Identities to eliminate hard-coded credentials
      • Update Management:
        • Automating patching with Azure Update Management for Windows & Linux
    Container Security Fundamentals
    • Using containers for lightweight, portable applications with Docker
    • Core Azure container services:
      • Azure Container Instances (ACI) – quick, serverless containers
      • Azure Container Registry (ACR) – private image storage
      • Azure Kubernetes Service (AKS) – container orchestration
    • Security best practices:
      • Vulnerability Scanning:
        • Scan images regularly for known exploits
      • Trusted Registries:
        • Use private registries instead of public/unverified images
      • Registry Protection:
        • Disable admin keys
        • Use Azure AD + RBAC
        • Enable firewall rules and Content Trust (image signing)
    Container & Orchestration Security
    • Securing container workloads:
      • Implementing network segmentation
      • Managing secrets securely (no hardcoding)
      • Enforcing least-privilege runtime permissions
    • Reducing risks such as:
      • Container escape
      • Host takeover
      • Unauthorized access
    Orchestration with AKS
    • Understanding Kubernetes architecture:
      • Managed control plane (Azure-managed)
      • Worker nodes (VMs you manage)
      • Workloads organized into pods and namespaces
    • Practical operations:
      • Deploying apps using kubectl
      • Configuring secure access to ACR using service principals
      • Monitoring workloads via Kubernetes dashboard
    Key Takeaways
    • VM security depends on hardening, patching, and identity control
    • Container security requires trusted images and strict access control
    • ACR and AKS provide secure, scalable platforms when configured properly
    • Defense-in-depth is essential across VMs, containers, and orchestration layers
    This lesson equips you with the skills to secure both traditional VM workloads and modern containerized applications in Azure.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    24 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 6: Azure Network Security
    In this lesson, you’ll learn about monitoring and securing Azure networks using diagnostic tools and exam-focused strategies in Microsoft Azure:Network Monitoring with Network Watcher
    • Using Azure Network Watcher to diagnose and analyze network behavior
    • Key diagnostic tools include:
      • IP Flow Verify: Identifies which NSG rule allows or blocks traffic
      • Packet Capture: Captures and inspects live network traffic
      • Effective Security Rules: Displays all applied NSG rules on a VM
    • Gaining visibility into:
      • Network performance issues
      • Misconfigurations
      • Security rule conflicts
    Traffic Logging and Analytics
    • Enabling NSG Flow Logs to record inbound and outbound traffic
    • Storing logs in Azure Storage Accounts for analysis
    • Integrating with Log Analytics Workspace for deeper insights
    • Using Traffic Analytics to:
      • Visualize traffic patterns
      • Detect anomalies and suspicious behavior
      • Identify potential security threats
    Hands-On Configuration
    • Setting up:
      • Storage accounts for log retention
      • Log Analytics workspaces for querying and visualization
    • Monitoring:
      • Communication between resources
      • Blocked vs allowed traffic
      • High-risk network activity
    AZ-500 Exam Preparation
    • Practicing real-world scenarios focused on platform protection
    • Key exam skills include:
      • Determining the minimum number of NSG rules required for secure configurations
      • Designing route tables for:
        • Internet-bound traffic
        • On-premises connectivity
        • Integration with firewalls and NVAs
    Key Takeaways
    • Network Watcher provides deep visibility and troubleshooting capabilities
    • Logging and analytics are essential for threat detection and auditing
    • Understanding NSGs and routing is critical for both real-world security and the AZ-500 exam
    This lesson strengthens your ability to monitor, analyze, and secure Azure network environments while preparing you for certification success.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    23 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 5: Azure Network Infrastructure and Security
    In this lesson, you’ll learn about securing Azure network infrastructure and managing hybrid connectivity in Microsoft Azure:Remote Access Management
    • Applying operational security best practices:
      • Using dedicated admin workstations to protect credentials
    • Securely accessing virtual machines using:
      • Azure Bastion for RDP/SSH over SSL via the Azure portal
    • Eliminating exposure of public IPs for management access
    Hybrid Networking Solutions
    • Connecting on-premises infrastructure to Azure:
      • Azure VPN for encrypted tunnels over the public internet
      • ExpressRoute for private, high-speed enterprise connections
      • Network Virtual Appliances (NVAs) for advanced third-party firewall and security capabilities
    • Choosing the right solution based on:
      • Performance requirements
      • Security needs
      • Cost considerations
    Azure Firewall Implementation
    • Deploying Azure Firewall as a centralized security layer
    • Configuring:
      • Network rules (IP + ports filtering)
      • Application rules (FQDN-based filtering)
    • Integrating within a hub-and-spoke architecture for:
      • Centralized traffic inspection
      • Simplified security management
    Global Application Delivery & Protection
    • Using Azure Front Door for:
      • Layer 7 load balancing
      • SSL termination
      • High-performance global routing
    • Enhancing protection with Azure Web Application Firewall (WAF):
      • Blocking SQL injection and XSS attacks
      • Applying geo-filtering policies
      • Mitigating DDoS attacks
    Hands-On Implementation
    • Deploying multi-region backend infrastructure
    • Configuring:
      • Custom domains with SSL certificates
      • WAF policies for traffic filtering and threat mitigation
    Key Takeaways
    • Secure access starts with controlled entry points (like Azure Bastion)
    • Hybrid connectivity requires balancing security, speed, and cost
    • Centralized security (Azure Firewall + hub-spoke) improves visibility and control
    • Edge services (Front Door + WAF) are critical for performance and protection at scale
    This lesson equips you with the knowledge to design secure, scalable, and globally accessible Azure network architectures.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    24 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 4: Protecting Azure Virtual Networks
    In this lesson, you’ll learn about implementing and securing Azure Virtual Networks (VNETs) for robust cloud network protection:Virtual Network Foundations
    • Understanding VNET architecture in Microsoft Azure:
      • Defining private IP ranges using CIDR notation
      • Configuring custom DNS settings
      • Segmenting networks into subnets for isolation
    • Service Endpoints:
      • Creating secure, direct connections to Azure services (e.g., Storage, SQL)
      • Keeping traffic within the Microsoft backbone instead of the public internet
    Virtual Network Peering
    • Connecting multiple VNETs across regions securely
    • Enabling:
      • VNET-to-VNET communication over Microsoft’s backbone
      • Gateway transit for shared VPN/ExpressRoute access
    • Supporting scalable architectures like hub-and-spoke models
    Network Security Groups (NSGs)
    • Using NSGs as stateful firewalls to control traffic flow
    • Applying rules based on the five-tuple model:
      • Source IP
      • Source port
      • Destination IP
      • Destination port
      • Protocol
    • Leveraging service tags to simplify rule management for Azure services
    Application Security Groups (ASGs)
    • Grouping virtual machines by role (e.g., Web, App, Database tiers)
    • Applying security policies based on logical groupings instead of IPs
    • Simplifying rule management in complex environments
    Hands-On Security Implementation
    • Building a secure lab environment:
      • Deploying a Windows bastion host for controlled access
      • Creating a Linux application server
    • Applying strict access controls:
      • Restricting RDP access to a trusted public IP only
      • Allowing SSH communication between authorized internal systems
      • Blocking all traffic by default
    Key Takeaways
    • VNETs provide network isolation and segmentation in the cloud
    • Security is enforced through layered controls (NSGs + ASGs + endpoints)
    • Proper design (e.g., bastion hosts, least access rules) significantly reduces attack surface
    This lesson builds a strong foundation for securing Azure infrastructure by combining network design, access control, and practical implementation strategies.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    23 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 3: Mastering Azure Identity and Access Management
    In this lesson, you’ll learn about managing identity and access in Microsoft Azure, aligned with the AZ-500 certification, with a strong focus on security and privileged access control:Azure Active Directory Identity Protection
    • Detecting and responding to risky sign-ins and accounts, such as:
      • Logins from anonymous IPs (e.g., via Tor)
      • Unusual behavior or leaked credentials
    • Identifying vulnerabilities like:
      • Users without Multi-Factor Authentication (MFA)
      • Weak or exposed credentials
    • Using automated policies to:
      • Trigger alerts
      • Enforce remediation (e.g., force password reset or MFA)
    Tenants, Subscriptions, and Roles
    • Understanding structure:
      • Azure AD Tenant → Identity layer
      • Azure Subscription → Resource management layer
    • Differentiating roles:
      • Azure AD roles → Manage users, groups, identities
      • Azure RBAC roles → Manage cloud resources
    • Core RBAC roles:
      • Owner → Full control
      • Contributor → Modify resources (no access control)
      • Reader → View-only access
    • Assigning roles to:
      • Users
      • Groups
      • Service principals
    Privileged Identity Management (PIM)
    • Using Azure AD Privileged Identity Management (PIM) to reduce risk from privileged accounts
    • Key concepts:
      • Just-In-Time (JIT) access → No permanent admin rights
      • Time-bound activation → Roles expire automatically
      • Approval workflows → Require authorization before elevation
      • MFA enforcement for sensitive roles
    • Governance features:
      • Access reviews to validate ongoing need for permissions
      • Auditing and tracking privileged activity
    Practical Security Scenarios
    • Simulating risky behavior (e.g., Tor login) to trigger alerts
    • Enforcing Conditional Access + PIM together for layered security
    • Managing identities using least privilege principles
    Exam Preparation Focus (AZ-500)
    • Choosing cost-effective identity protection solutions
    • Understanding hybrid identity (e.g., Azure AD Connect basics)
    • Combining:
      • Conditional Access
      • Identity Protection
      • PIM
    Key Takeaways
    • Identity is the primary security boundary in cloud environments
    • Privileged access must be:
      • Temporary
      • Audited
      • Strictly controlled
    • Combining detection (Identity Protection) with control (PIM + RBAC) provides strong defense against account compromise
    This lesson marks a major milestone, building the foundation for becoming an Azure Security Engineer with a focus on identity-first security.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    23 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 2: Managing Security and Hybrid Identity Integration
    In this lesson, you’ll learn about securing and managing hybrid identities using Azure Active Directory, bridging on-premises infrastructure with cloud services:Identity Security and Access Control
    • Conditional Access & MFA:
      • Define access policies based on conditions like location, device state, or risk level
      • Enforce Multi-Factor Authentication (MFA) or block suspicious logins
    • Azure AD Password Protection:
      • Prevent weak passwords using:
        • Microsoft’s global banned password list
        • Custom organization-specific banned terms
      • Smart Lockout to mitigate brute-force attacks
    Hybrid Identity with Azure AD Connect
    • Custom Domain Integration:
      • Add and verify domains (e.g., company.com) via DNS
      • Enable users to authenticate with corporate credentials instead of default domains
    • Authentication Methods:
      • Password Hash Synchronization (PHS):
        • Sync password hashes to the cloud
        • Reduces dependency on on-prem infrastructure
      • Pass-through Authentication (PTA):
        • Validates credentials directly against on-prem Active Directory
        • No password storage in the cloud
      • Federation (ADFS):
        • Uses a trusted identity provider (STS)
        • Supports advanced scenarios like smart cards and on-prem MFA
    Monitoring and Health
    • Azure AD Connect Health:
      • Monitor sync status and performance
      • Detect connectivity issues and failures
      • Maintain reliability of hybrid identity infrastructure
    Hands-On Implementation
    • Setting up a lab with:
      • Windows Server (e.g., domain controller simulation)
      • PowerShell scripts to automate user and group creation
    • Installing and configuring Azure AD Connect:
      • Using express settings for quick deployment
      • Synchronizing on-prem identities with Azure AD
    Key Takeaways
    • Hybrid identity enables seamless Single Sign-On (SSO) across environments
    • Security is enforced through layered controls (MFA, Conditional Access, password policies)
    • Choosing the right authentication method depends on security needs vs. infrastructure complexity
    This lesson shows how to combine on-prem control with cloud scalability, creating a secure and flexible identity management system.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    17 min
  • Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 1: Essential Identity Management and Security Protection
    In this lesson, you’ll learn about:
    • Azure Active Directory (Azure AD) fundamentals, including its role as a centralized identity and access management platform for users, groups, and applications.
    • Architecture and licensing tiers, understanding the differences between:
      • Free
      • Basic
      • Premium P1
      • Premium P2 (advanced security capabilities)
    • Identity management in Azure AD:
      • Managing users (internal, Microsoft accounts, and guest users)
      • Managing groups (Security and Microsoft 365 groups)
      • Differentiating between:
        • Azure AD roles (identity-level permissions)
        • Azure RBAC roles (resource-level permissions)
    • Application integration and authentication model:
      • Difference between:
        • Application objects (global app definition)
        • Service principals (instance within a tenant with assigned permissions)
      • Registering applications, generating client secrets, and assigning API permissions
    • Advanced security features (Premium P2):
      • Conditional Access policies to control login conditions
      • Identity Protection for detecting risky sign-ins
      • Privileged Identity Management (PIM) for just-in-time admin access
    • Baseline security protections, including:
      • Enforcing Multi-Factor Authentication (MFA) for administrators
      • Blocking legacy authentication protocols
      • Applying predefined security policies to reduce attack surface
    • Practical administration tools and workflows:
      • Using Microsoft Authenticator for MFA enrollment
      • Managing identities and applications via the Azure CLI
      • Performing actions as a service principal for automation and scripting
    This lesson provides a complete foundation for managing identities, securing access, and implementing modern cloud-based authentication and authorization controls within Azure environments.

    You can listen and download our episodes for free on more than 10 different platforms:
    https://linktr.ee/cybercode_academy

    Get the books of the CyberCode Academy podcast:
    📚 The book series: 416 lessons, 12 books, hundreds of original diagrams: security, networking and programming.
    https://cybercodeacademy.gumroad.com/
    24 min

About CyberCode Academy

From the publisher's feed

Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity.
🎧 Each course is divided into a series of short, focused episodes that take you from beginner to…