I'd recently renewed my Azure Network Engineer certification, and it's good to see how much of the syllabus is still highly relevant from a cloud security angle. From a certain perspective, it's a stepping stone to the Azure Security Engineer certification (AZ-500), and a good check for useful knowledge.

I'd recently come across WatchGuard's Internet Security Report for last quarter (available here and a summary article here). The findings are surprising, and if the report's results are broadly accurate, indicate a notable lack of tuning of the relevant network security tools.

In case you may not have heard of Static Site Generators (SSGs), they offer a very cost effective (often free) way to create a website.

However, using SSGs introduces certain feature and security considerations.

Recently I completed the course materials for CloudBreach's "Breaching Azure" and took the lab exam, obtaining their "Offensive Azure Security Professional" (OASP) certification. Microsoft's Azure and security certifications focus on building and defending cloud services, not trying to bypass defenses, making this certification quite different.

Hello and welcome!

I am Michael and I run CloudInfosec.net.

I am a cyber security consultant in Adelaide, Australia - I work in and write about cloud and email security, incident response, and professional development.

If you are interested in seeing collected write-ups of solving particular problems or reviews of various security training offerings, you may find this site to your liking.

Please note, this is a personal website and expresses my opinions alone, and not that of any organizations.