Security documentation
This collection of resources is designed to help you find security related documentation and information from across Microsoft. The Security Engineering section contains articles referenced on the Microsoft Security Engineering web site for specific engineering topics such as Security Development Lifecycle (SDL), Operational Security Assurance (OSA) and Secure DevOps. If you are looking for security documentation for Microsoft products and services, please go to the Product Security section.
- Security Articles
-
Security Engineering
-
-
Security Development Lifecycle
- Tracking security work items in Azure DevOps
- Install FxCop analyzers in Visual Studio
- Microsoft SDL Cryptographic Recommendations
- Threat Modeling Tool feature overview
- Getting started with the Threat Modeling Tool
- Microsoft Threat Modeling Tool threats
- Microsoft Threat Modeling Tool mitigations
- Security Bug Bar (Sample)
- Using Azure Security Center for an incident response
-
Operational Security Assurance
- Applocker
- Azure DDoS Protection Standard overview
- Device Guard: Windows Defender Application Control and virtualization-based protection of code integrity
- Enterprise Mobility + Security Documentation
- How it works: Azure Multi-Factor Authentication
- Just Enough Administration
- Key Vault Configuration
- Key Vault Documentation
- Privileged Account Workstations
- Role-based access control documentation
- Safe storage of app secrets in development in ASP.NET Core
- Securing SQL Server
- Using a Windows VM system-assigned managed identity to access Azure Key Vault
- Using a Linux VM system-assigned managed identity to access Azure Key Vault
- What is Azure AD Privileged Identity Management
- What is managed identities for Azure resources
- Windows security baselines
-
-
-
Product Security
-
-
Enterprise Mobility + Security
-
Microsoft Graph
-
