💪Deploying a solution in Azure to investigate Network Anomalies

Dave R - Microsoft Azure & AI MVP☁️
CodeX
Published in
8 min readOct 9, 2021

--

Learn how to deploy an NDR solution using Azure Bicep to reveal threats undetectable by other technologies.

Securing Workloads through Network Detection and Response capabilities might be overwhelming if you’re starting in the Cyber security space.

Here’s a capture of the initial findings in a web application:

Anomaly Detection

How did we get here? First, let’s be clear with terminology. Network detection and response (NDR) refers to a progressive security solution for obtaining complete visibility to known and unknown threats across your network.

This article aims to share with you my personal experience deploying an NDR solution in the Azure Cloud and the configuration needed to detect threats and respond.

I will share how I deployed a solution in Azure to detect threats and anomalies for an application running in an on-premises data center.

Architecture reference

The diagram below shows a high-level overview of the environment.

Pre-requisites:

--

--