Surviving a Ransomware Attack with Azure Site Recovery Volume 1
This book is 95% complete
Last updated on 2019-04-14
About the Book
Have you been the victim of an Ransomware Attack? Are you worried about Ransomware and how to defend against it? Well if so then this book is for you. This step by step guide will show you how to use Microsoft’s Azure Site Recovery, Windows Defender Advanced Threat Protection, Window Admin Center and more to build your Cyber Security Defense against Ransomware.
This book details how to use Ransomware Simulation tools to test your Anti-Virus and Anti-Malware. It also includes a live scenario showing how a Domain Controller can be attacked and how to recovery for this attack.
From all of our Authors at MVPdays publishing we hope you enjoy this book. Follow us @MVPDays @DaveKawula and @SuperCristal1 for the latest details on all of our community work.
About the Authors
Table of Contents
Chapter 1 17
Setting up your Azure Subscription from Scratch 17
Chapter 2 24
Building a Hyper-V Nested VM with Multiple Public IP Addresses in Azure 24
Building a Windows Server 2016 Virtual Machine 24
Creating Multiple Internal and External IP’s for the Lab 35
Enable Hyper-V in the LAB Virtual Machine 42
Configuring NAT Networking with one Public IP Address 50
Configuring NAT Networking with Multiple Public IP Address 53
Adding an IP Address to the lab Host (VM) 53
Configuring Routing and Remote Access on the Azure Nested Virtual Machine 57
Configure NAT Rules in RRAS for the Lab 65
Disable Windows Firewall 72
Create a NAT Rule in the Azure NSG for the Lab 74
Testing the NAT Rules in the lab 80
Using PowerShell to automate RRAS NAT Rule Configurations 85
Chapter 3 88
Using BigDemo to Build your Lab 88
Lab Server Names 88
Building the Lab with BigDemo_ASR_WAC.PS1 91
Chapter 4 95
Configuring Windows Admin Center 95
Install Google Chrome and Mozilla FireFox 96
Configure Windows Admin Center 97
Configure Azure Integration 99
Configure Azure Backup 104
Verifying Backups locally with the Backup Microsoft Azure Backup Agent 110
Configuring Windows Azure Update Management 112
Configure Azure Site Recovery 119
Upgrade to Security Center Standard in Azure 125
Chapter 5 127
Windows Defender Advanced Threat Protection ATP 127
Onboarding a Server with Windows Defender ATP 128
Reviewing an Incident with Windows Defender Advanced Threat Protection 130
Chapter 6 133
Simulating a Ransomware Attack 133
KnowBe4 Ransomware Simulator on Windows Server 2019 133
Enabling Ransomware Protection on Windows Server 2019 141
Executing a Ransomware Attack with PowerShell 145
Chapter 7 152
Recovering from Ransomware using Azure Site Recovery 152
Notes from the Field 152
Why Airgapped Replicas are the only choice 152
Why Planned Failover is no longer an option 152
Failover Now is the only Option 153
Watch you Six (Clock) 153
Do not connect your Azure Site Recovery Virtual Machines to a live Site-to-Site VPN 154
When can I get back into my data? 154
Ok, so I didn’t listen and lost everything now what? 155
Don’t forget to tune your Replication Policy 156
Testing Failover can be a quick Ransomware Fix 156
Reset Settings for your Azure Site Recovery Hyper-V Host 157
Enable Diagnostic Logging for Azure Site Recovery 162
Zero Day time to Failover 163
Assuming an Admin Level breach Failing over 100 % to Azure 163
Executing a PowerShell based Ransomware Attack on Domain Controllers. 163
Encrypting the Sysvol Folder 165
Taking Down Production Killing Domain Controllers with Ransomware 171
Encrypting the Active Directory Database 171
Survival Mode Recovering to Azure 178
Tick Tock time to make a decision – We are Recovering to Azure 179
Performing the Double Swing Recovery 180
Chapter 8 188
Disaster Recovery items left forgotten 188
Chapter 9 189
Join us at MVPDays and meet great MVP’s like this in person 189
Live Presentations 189
Video Training 189
Live Instructor-led Classes 190
Consulting Services 190
Other books by these authors
The Leanpub 45-day 100% Happiness Guarantee
Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
See full terms
Free Updates. Free App. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers), EPUB (for phones and tablets), MOBI (for Kindle) and in the free Leanpub App (for Mac, Windows, iOS and Android). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
