Скачать или смотреть Azure RBAC Misconfiguration Detection & Remediation Lab

This hands‑on lab demonstrates a full end‑to‑end workflow for identifying, investigating, and remediating a privilege escalation scenario in Microsoft Azure. The goal of this project was to simulate a real‑world misconfiguration, generate meaningful security telemetry, and use Microsoft Sentinel to detect unauthorized activity.

What this lab covers:
Creating and assigning an overly permissive RBAC role
Performing unauthorized VM actions to simulate attacker behavior
Ingesting AzureActivity logs into Microsoft Sentinel
Building KQL queries to surface suspicious privilege use
Investigating events and correlating activity
Remediating the misconfiguration and restoring least‑privilege access
Reviewing the full incident lifecycle from initial misconfig → detection → response

Skills demonstrated:
Azure RBAC & IAM fundamentals
Cloud misconfiguration analysis
Microsoft Sentinel log ingestion
KQL query development
Incident investigation workflow
Practical cloud security troubleshooting
This project is part of my cybersecurity/cloud security portfolio, showcasing hands‑on experience with Azure, Sentinel, and real detection engineering concepts.

If you’d like to see more labs or connect professionally, feel free to reach out on LinkedIn.

Thank you,

Kyle H