April 9, 2025
Right when VNet Flow Logs were launched I blogged about some recipes that help to extract insights out of the different information fields contained in the […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Blog
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- access control list
- acls
- Active Directory
- Active Directory Management
- Active Directory Sync
- Activity Log
- AD DS
- AD DS Migration
- AD Health Check
- Adversary-in-the-middle (AiTM)
- Agentic AI
- agic
- AI
- AI + Machine Learning
- ai foundry
- AIOps
- AKS
- AMA
- AML
- analytics
- Analytics and Big Data
- Annual Channel
- API Management
- API manager
- api-development
- apiops
- APIs
- App Configuration
- App Control
- app service
- app-modernization
- Application Gateway
- application gateway for containers
- Application Insights
- application security groups
- Arc Jumpstart
- arm
- Article
- Artificial Intelligence
- ASP.NET Core
- Audio Notes
- authentication
- authorization
- Auto Mode
- automation
- Automation Account
- Availability Zones
- AVD
- AVD Optimization
- AVD Setup
- AVD Storage Optimization
- AVM
- avnm
- aws
- AZ-900
- Azure
- Azure 2025 Update
- Azure Access Control
- Azure Action Groups
- Azure Active Directory
- Azure Activity Logs
- Azure AD
- Azure AD Connect
- Azure AD Sync
- Azure Adaptive Cloud
- Azure Admin Guide
- Azure Administration
- Azure Admins
- azure adoption
- Azure AI
- Azure AI Foundry
- Azure AI Search
- azure ai studio
- Azure ai-services
- Azure Alerts
- azure application delivery
- Azure Application Gateway
- azure application gateway for containers
- Azure Archive Storage
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Best Practices
- Azure Bicep
- Azure Billing Models
- Azure Blob Storage
- Azure Blob vs File Storage
- Azure Blob vs File vs Disk
- Azure Built-In Security
- Azure Cache for Redis
- Azure Chaos Studio
- Azure CLI
- Azure Cloud
- Azure Cloud Architect
- Azure Cloud Computing
- Azure Cloud Identity
- Azure Cloud Management
- Azure Cloud Security
- Azure Cloud Storage
- Azure Cloud Tutorial
- Azure Compliance
- Azure Compute Fleet
- Azure Conditional Access
- Azure confidential ledger
- Azure Configuration Tutorial
- Azure Container Apps
- Azure Container Instances
- Azure Container Registry
- Azure Container Storage
- Azure Cosmos DB
- Azure Data Box
- Azure Data Explorer
- Azure Data Factory
- Azure Data Lake Storage
- Azure Data Management
- Azure Data Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Database Migration service
- Azure Databricks
- Azure Demo
- Azure Deployment Environments
- Azure DevOps
- Azure DevTest Labs
- Azure Disk Storage
- Azure DNS
- Azure Domain Services
- Azure Dynamic Alerts
- Azure Edition
- Azure Elastic SAN
- Azure Enterprise Applications
- Azure Entra ID
- Azure Entra Migration
- azure essentials
- Azure Essentials Show
- Azure ExpressRoute
- Azure File Share
- Azure File Share Best Practices
- Azure File Share Configuration
- Azure File Share Explained
- Azure File Share Metrics
- Azure File Share Optimization
- Azure File Share Performance
- Azure File Shares
- Azure File Storage
- Azure File Storage Comparison
- Azure File Storage Pricing
- Azure Files
- Azure Files Demo
- Azure Firewall
- Azure Firewall Manager
- azure firewall policy
- azure fleet
- Azure Front Door
- Azure Functions
- Azure Functions Flex Comsumption
- Azure Global
- Azure Governance
- Azure HDInsight on Azure Kubernetes Service (AKS)
- Azure Health Data Services
- azure hybrid
- Azure Hybrid Benefit
- Azure Hybrid Identity
- Azure Identity Management
- Azure Identity Services
- Azure Image Builder
- Azure Infrastructure
- Azure Internet Access
- Azure IP Addressing
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Lab
- Azure Load Balancer
- Azure Load Testing
- Azure Local
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- Azure Machine Learning
- azure management
- Azure Maps
- Azure Metrics
- Azure Migrate
- Azure Monitor
- Azure Monitor Agent
- Azure Monitor Workbooks
- Azure NAT Gateway
- Azure NAT Gateway Tutorial
- Azure NetApp Files
- azure network monitoring
- Azure Network Security
- Azure Networking
- Azure Networking Configuration
- azure networking tutorial
- Azure Open AI
- azure openai
- azure openai service
- Azure Performance Monitoring
- Azure Performance Optimization
- Azure Platform
- Azure Policy
- Azure Portal
- Azure Portal Tutorial
- Azure PowerShell
- Azure Private Access
- Azure Private Applications
- Azure Private Endpoint
- Azure Private Link
- Azure Private Link Service
- Azure Private Networking
- Azure Private Subnets
- Azure Profile Management
- azure rbac
- Azure Red Hat OpenShift
- Azure Resource Graph
- azure routing
- Azure Secure Connectivity
- Azure Security
- Azure Security Best Practices
- Azure Sentinel
- Azure Service Bus
- Azure Setup
- Azure SignalR Service
- Azure Site Recovery
- Azure Skill Sprint
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Edge
- Azure SQL Managed Instance
- Azure Stack
- Azure Stack HCI
- Azure Static Alerts
- Azure Step-by-Step
- Azure Step-by-Step Guide
- Azure Storage
- Azure Storage Access Tiers
- Azure Storage Access Tiers Explained
- azure storage account
- Azure Storage Account Setup
- Azure Storage Actions
- Azure Storage Alerts
- Azure Storage Best Practices
- Azure Storage Cost Optimization
- Azure Storage Cost Savings
- Azure Storage Demo
- Azure Storage Explained
- Azure Storage for Beginners
- Azure Storage IOPS
- Azure Storage Monitoring
- Azure Storage Options
- Azure Storage Overview
- Azure Storage Performance
- Azure Storage Pricing
- Azure Storage Tips
- Azure Storage Tutorial
- Azure Storage Types
- Azure Stream Analytics
- azure subnet
- Azure Subnets
- Azure Subscription
- Azure Synapse Analytics
- azure traffic analytics
- Azure Traffic Forwarding
- azure training
- Azure Troubleshooting
- Azure Tutorial
- Azure Tutorials
- Azure Update Manager
- Azure Virtual Desktop
- azure virtual machine
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual Networks
- Azure VM
- Azure VM Internet Access
- Azure VM Security
- Azure VM Setup
- Azure VMware Solution
- Azure VNets
- Azure VPN Alternative
- Azure Well-Architected Framework
- azure-ad-b2c
- azure-arc
- azure-b2c
- AzureAIFoundry
- AzureAISearch
- azurebicep
- azuredevops
- azureopenai
- azureverifiedmodules
- Bastion Host
- beginners
- best practices
- bgp
- Bicep
- biceplang
- Bing Search
- Blazor
- Blizzard
- blog
- Book Review
- Bot
- branch
- Branches
- Business
- Business Intelligence
- C#
- Canceled
- CCAK
- Certificate of Cloud Auditing Knowledge
- Certification
- Certifications
- Chat GPT
- chatgpt
- client-credentials-flow
- Cloud
- Cloud Architect
- Cloud Audit
- Cloud Cultures
- Cloud Directory Sync
- Cloud Foundation
- Cloud Governance
- Cloud Infrastructure
- Cloud Mechanix
- Cloud Migration
- Cloud Native
- Cloud Network Security
- cloud networking
- Cloud Recovery
- Cloud Rewind
- cloud security
- Cloud Security Alliance
- Cloud Services
- Cloud Skills
- Cloud Storage
- Cloud Storage Tiers
- cloud terminology
- cloud-computing
- CloudFamily
- Cmd
- cmk
- code
- codegeneration
- coding
- Command Line
- community
- Commvault
- Compliance
- compute
- Conditional Access
- Conditional Access Policies
- Conference
- Configuration
- container networking
- containers
- cordon
- cosmosdb
- Cost Management
- cost-optimization
- Course
- credential theft
- cryptojacking
- csharp
- custom error
- custom-policies
- Customer Managed Key
- Cyber Security
- Cybersecurity
- CyberSecurity Certifications
- D365
- D365 CE
- D365 F&O
- D365 Sales & CRM
- dashboards
- data
- Data Protection
- Databases
- Dayforce
- Default Outbound Access
- delete
- Deleted
- dependabot
- deployment
- dev-containers
- Developer Life
- Developer Tools
- Development
- devops
- DevSecOps
- Diagnostic Settings
- distributed-systems
- dns
- DNS Configuration
- Document Summarisation
- document-intelligence
- Domain Controller
- Domain Controller Demotion
- dotnet
- Dynamic Scope
- ECMA2
- Edge
- EF Core
- EKS
- Elastic Search
- Encryption
- Enterprise File Sharing
- enterprise-architecture
- entra
- Entra Configuration
- Entra Connect
- Entra Connect High Availability
- Entra Connect Migration
- Entra Connect Staging Mode
- Entra Connect Step by Step
- Entra Global Secure Access
- Entra ID
- Entra ID Free
- Entra ID licensing
- Entra Internet Access
- Entra Private Access
- Entra Private Access Tutorial
- Entra Reporting
- Entra Suite
- entra-external-id
- epac
- Event
- Event Grid
- event-driven-architecture
- Events
- Exam Prep
- Exec posts
- ExpressRoute
- expressroute local
- Extended Network for Azure
- external-id
- external-identity
- fail()
- Features
- federation
- fiddler
- File Sharing Security
- FIM
- fine-tuing
- Fine-tuning
- finops
- Firewall
- Firewall Policy
- firewall rules
- Flex Comsumption Deployment
- flow
- Forrester Waves
- foundry
- FSLogix Best Practices
- FSLogix Configuration
- FSLogix Performance
- FSLogix Tips
- FSLogix Troubleshooting
- FSMO Roles
- Function App
- Function Calling
- Gartner Magic Quadrant
- gateway api
- genai
- General
- General Development
- Generative AI
- Git
- GitHub
- GitHub Actions
- github copilot
- GitHub Project
- githubcopilot
- Global Secure Access
- governance
- gpt4o
- Grafana
- grafana dashboards
- granfeldt
- Graph
- gwctl
- HashiCorp
- HashiCorp Ambassador
- Have I Been Pwned
- Helm
- Hot Cool Cold Archive Tiers
- How-to
- http route
- hub
- Hub & Spoke
- hub-and-spoke
- Hugo
- Hybird
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- Hybrid Cloud Authentication
- Hybrid Identity
- IaaS
- IaC
- icmp
- identity
- Identity and access management
- Identity-Based Security
- In development
- In preview
- influencers
- infrastructure
- Infrastructure As Code
- infrastructureascode
- ingress controller
- Integration
- Internet of Things
- Investor Relations
- IoT
- IP Addressing in Azure
- ipam
- IPv4
- ISACA
- IT administration
- IT Networking
- IT Pro
- IT Professionals
- IT Security
- IT Training
- IT Tutorials
- java
- jfk-assassination
- jwt-token
- K8s
- KDC Proxy
- KEMP
- Kerberos Authentication
- Key Vault
- kinde
- KQL
- kubernetes
- kubernetes fleet
- kubernetes gateway
- kubernetes gateway api
- kubernetes networking
- Kusto
- kusto query language
- Lab
- Lambda functions
- Landing Zones
- Launched
- learning
- LINUX
- Linux Server
- Linux Virtual Machines
- Linux VM
- Living off the land
- LLM
- Load Balancer
- load balancing
- Loadmaster
- Log Alerts
- Log Analytics
- Log Analytics Workspace
- Logic Apps
- Long-Term Servicing Channel
- macOS
- Managed Prometheus
- Management
- Management and Governance
- Management Groups
- masking
- MCP
- Micosoft Ignite 2024
- micro-segmentation
- microsegmentation
- Microsoft
- Microsoft 365
- Microsoft 365 Security
- Microsoft Azure
- Microsoft Azure Tutorial
- Microsoft Cloud
- Microsoft Cloud Security
- Microsoft Cloud Storage
- Microsoft Connect
- Microsoft Copilot for Azure
- Microsoft Defender
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra Domain Services
- Microsoft Entra ID
- Microsoft Entra Suite
- Microsoft Fabric
- Microsoft Graph
- Microsoft identity management
- Microsoft Ignite
- Microsoft Ignite 2024
- Microsoft licensing
- Microsoft PIM
- Microsoft Security
- Microsoft Sentinel
- Microsoft SQL Server
- Microsoft Training
- Microsoft Visual Studio
- microsoft-support
- MicrosoftBuild
- Midnight Blizzard (NOBELIUM)
- Migrate Entra Connect
- Migration
- MIM
- Misc
- MITRE ATT&CK
- ML
- Mobile
- modules
- Monitoring
- msal
- msee
- MSEvents
- MSIgnite2024
- multi-cluster load balancing
- multi-cluster networking
- multi-region
- multicloud
- multiregion
- MVPBuzz
- NAT Gateway
- NAT in Azure
- native-authentication
- network
- Network Address Translation
- Network security
- network security group
- network security rules
- Network Traffic Filtering
- network virtual appliance
- Network Watcher
- network-tracking
- networking
- Networking Basics
- new
- News
- NodeJS
- NoSQL
- NSG
- nuget
- nva
- NVIDIA
- nxdomain
- nxdomainredirect
- observability
- oidc
- On-Premises AD
- Open AI
- open source
- openai
- OpenAI Assistant
- opensource
- Operating System
- OperatingSystem
- Operational Excellence
- overlay cni
- P1 vs P2
- PaaS
- PaaS networking
- Packer
- path prepending
- patterns
- Performance Efficiency
- PIM
- Playbook
- Pluralsight
- politics
- postgresql
- Power Apps
- power automate
- Power Automate Flow
- Power BI Embedded
- power-platform
- powershell
- PowerShell Active Directory
- presentations
- Press Releases
- Pricing & Offerings
- Privacy
- private dns
- Private Endpoint
- Private Endpoint Configuration
- private link
- Private Link Service Tutorial
- private networking
- Private Subnets
- privatelink
- privatelinkrealitybites
- Privileged Identity Management
- Process Improvement
- Productivity
- profile-edit
- programming
- Progress
- Promote DC
- Prompt Engineering
- Prompty
- Prototyping
- Provisioned V1 vs V2
- Provisioned V2 Azure
- Public vs Private IP
- pullrequest
- python
- Quick Post
- ransomware
- Raspberry Pi
- RBAC
- Recent News
- recording
- Regions & Datacenters
- Reliability
- Remote code execution
- Remove Domain Controller
- Resiliency
- resolution
- Resource Health
- responsible-ai
- REST API
- Retirements
- reverse proxy
- route table
- router
- routeserver
- routing
- s2s vpn
- SAML
- SCDPM
- SCOM
- SCVMM
- SDK and Tools
- SdkAndTools
- SDKs
- Secure Azure Connections
- Secure File Sharing
- Secure Internet Access
- Secure Remote Access
- Secure SMB Access
- Secure Web Gateway
- security
- security admin rules
- Security Baseline
- Security strategies
- Semantic Kernel
- Sentinel
- Server Manager
- service endpoint policy
- Service Management
- Services
- SIEM
- signature
- site-to-site
- Sleet
- SMB Configuration
- SMB over QUIC
- SMS
- snyk
- SOAR
- software-architecture
- Software-Defined Networking
- software-design
- software-development
- speaking
- Speech
- Speech to Text
- spoke
- sql
- SQL Interview
- SQL Server
- SQL Server on Azure Virtual Machines
- Star Blizzard (SEABORGIUM)
- State Management
- static code analysis
- Static IP Azure
- storage
- Storage Accounts
- Storage Metrics
- Storage Replicas
- Storm
- Subnet Mask
- Subnetting
- Survey
- Sysadmin
- SysCtr
- Syslog
- system administrator
- System Center
- System Center 2025
- teams
- Tech Guide
- tech tip
- Tech Tutorial
- Technology
- terminology
- Terraform
- Terraform Tests
- test
- testing
- Text Analytics
- Thomas Maurer
- Threat Detection
- TLS 1.3 Encryption
- totp
- trace
- traffic analytics
- Traffic Manager
- traffic visibility
- Transaction Optimzed
- troubleshooting
- tutorial
- Uncategorized
- Update Manager
- updated
- user-defined route
- User-Defined Routing
- validation
- VDI
- VDI Solutions
- Video
- Virtual desktop infrastructure
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- virtual network flow logs
- Virtual Network Gateway
- virtual network service endpoint
- Virtual Network Subnet
- Virtual WAN
- Virtualization
- Visual Studio
- Visual Studio Code
- VNet
- VNet Flow Logging
- vnet flow logs
- VNet Peering
- vpn
- VPN Alternative
- VPN Gateway
- vpn site-to-site
- vscode
- vwan
- Web
- web app
- web application firewall
- Web Content Filtering
- Web Filtering Policy
- webapp
- Well-Architected Framework
- WellArchitectedFramework
- Windows
- Windows 11
- Windows 365
- Windows AD
- Windows Admin Center
- Windows Console
- Windows Firewall
- Windows Security
- Windows Server
- Windows Server 2022
- Windows Server 2025
- Windows Server Administration
- Windows Server Azure Edition
- Windows Server Comparison
- Windows Server Datacenter
- Windows Server Deployment
- Windows Server Features
- Windows Server Hotpatching
- Windows Server Licensing
- Windows Server Management
- Windows Server Service Channels
- Windows Server Standard
- Windows Server Tutorial
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- Windows Virtual Machines
- Workbooks
- WSL
- XDR
- yaml
- Year In Review
- Zero Trust
- Zero Trust Networking
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Azure Tar
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Daniel Bradley
- Daniel McLoughlin
- Darren Robinson
- David O'Brien
- Dieter Gobeyn
- Freek Berson
- George Ollis
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Mark Tinderholt
- Matt Felton
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rory Braybrook
- Roy Kim
- Sam Cogan
- Sarah Lean
- Simon Waight
- Stanislav Zhelyazkov
- Sucheta Gawade
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Wesley Haakman
- Will Velida
March 21, 2025
Published by Jose Moreno on March 21, 2025
Categories
I would like to credit for this blog post to Abhishek Sharma, talking to him gave me the main inspiration for some of the concepts you […]