Surviving a Ransomware Attack with Azure Site Recovery Volume 1
Surviving a Ransomware Attack with Azure Site Recovery Volume 1
$49.95
Minimum price
$99.95
Suggested price
Surviving a Ransomware Attack with Azure Site Recovery Volume 1

This book is 95% complete

Last updated on 2019-04-14

About the Book

Have you been the victim of an Ransomware Attack? Are you worried about Ransomware and how to defend against it?  Well if so then this book is for you.  This step by step guide will show you how to use Microsoft’s Azure Site Recovery, Windows Defender Advanced Threat Protection, Window Admin Center and more to build your Cyber Security Defense against Ransomware. 

This book details how to use Ransomware Simulation tools to test your Anti-Virus and Anti-Malware.  It also includes a live scenario showing how a Domain Controller can be attacked and how to recovery for this attack.

From all of our Authors at MVPdays publishing we hope you enjoy this book. Follow us @MVPDays @DaveKawula and @SuperCristal1 for the latest details on all of our community work.

  • Share this book

  • Feedback

    You must own a copy of this Book to access the forums

    Email the Author(s)

About the Authors

Dave Kawula
Dave Kawula

Dave is a Microsoft Most Valuable Professional (MVP) with over 20 years of experience in the IT industry. His background includes data communications networks within multi-server environments, and he has led architecture teams for virtualization, System Center, Exchange, Active Directory, and Internet gateways. Very active within the Microsoft technical and consulting teams, Dave has provided deep-dive technical knowledge and subject matter expertise on various System Center and operating system topics.

Dave is well-known in the community as an evangelist for Microsoft, 1E, and Veeam technologies. Locating Dave is easy as he speaks at several conferences and sessions each year, including TechEd, Ignite, MVP Days Community Roadshow, and VeeamOn. 

Recently Dave has been honored to take on the role of Conference Co-Chair of TechMentor with fellow MVP Sami Laiho.  The lineup of speakers and attendees that have been to this conference over the past 20 years is really amazing. Come down to Redmond or Orlando in 2018 and you can meet him in person.

As the founder and Managing Principal Consultant at TriCon Elite Consulting, Dave is a leading technology expert for both local customers and large international enterprises, providing optimal guidance and methodologies to achieve and maintain an efficient infrastructure.

BLOG: www.checkyourlogs.net

Twitter: @DaveKawula

Emile Cabot
Emile Cabot

Émile is a five-time Microsoft Most Valuable Professional (MVP) who started in the industry during the mid-90s working at an ISP and designing web sites for celebrities. He has a strong background specializing in datacenter and deployment solutions, and has spent many years performing infrastructure analyses and solution implementations for organizations ranging from 20 to over 200,000 employees.

Émile organizes the Calgary Microsoft User Group, blogs on CheckYourLogs.net, and has presented at several conferences, including Ignite, VeeamOn, TechReady, and MVPDays.

He actively volunteers as a member of the Canadian Ski Patrol, providing over 250 hours each year for first aid services and public education at Castle Mountain Resort and in the community.

Cary Sun
Cary Sun

Cary Sun is an Principal Consultant, He has a strong background specializing in datacenter and deployment solutions, and has spent many years performing infrastructure analyses and solution implementations for organizations ranging from 20 to over 600,00 employees. He hold CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999 , Cisco Champion 2018 and Microsoft Most Valuable Professional (MVP). Cary is a published author with serveral titles, include blogs on Checkyourlogs.net, technical editors/reviewer for many books, including Master Storage Space Direct Volume 1.

BLOG: www.checkyourlogs.net

Personal Website: carysun.com

Twitter: @SifuSun

LinkedIn:http://linkedin.com/in/sifusun

Specialties: CCIE /CCNA / MCSE / MCITP / MCTS / MCSA / Solution Expert / CCA

Cristal Kawula
Cristal Kawula

Cristal Kawula is the co-founder of MVPDays Community Roadshow and #MVPHour live Twitter Chat.   She is the President of TriCon Elite Consulting where she manages the day to day operations of the field consulting and sales teams.

Cristal is also only the 2nd Woman in the world to receive the prestigious Veeam Vanguard Community excellence award.  In July of 2017 she was awarded the designation of Microsoft MVP.  

Early in her career Cristal worked as a consultant with Microsoft authoring content for internal SMSGR and GTR teams.   This content was used to train internal support engineers and global escalation engineering teams.  

Cristal can be found speaking at Microsoft Ignite, MVPDays, and other local user groups.   She is extremely active in the community and has recently helped publish a book for other Women MVP’s called Voices from the Data Platform.  

 

BLOG: http://www.checkyourlogs.net

Twitter: @supercristal1

John O'Neill Sr.
John O'Neill Sr.

John’s professional IT career began as a teenager, taking him on many wonderful adventures over the past 30 years. John’s IT path started with programming, but branched out quickly. Opportunities from the Help Desk to the Corner Office shape his IT journey. Specializing in Systems and Infrastructure technologies, John’s broad skillset includes Desktop and Server OS, Identity Management, Networking Services, Network Architecture, IP Telephony, and Security.

Passionate about giving back to the IT community, John develops relevant, timely content IT Pros take advantage of immediately. Part of the MVPDays team, he develops both online and in-print content. In addition, John authored material as a contributing editor for the Petri.co.il online community as well as senior contributor to Tom’s IT Pro, Redmond Magazine, Netwrix, and both Thomson-Reuters' Aspatore Books and Exec Blueprints publications.

Helping others succeed and advance in IT drives John to share knowledge. Speaking at conferences worldwide, developing technology training courses for Pluralsight’s online training library, and leading webinars are all regular investments by John in the current and next generation of IT professionals.

John is proud to be honored by industry organizations, leaders, and peers. John is a four-time recipient of Microsoft’s MVP Award. John received NEOSA’s CIO of the Year Award in 2012.

Bundles that include this book

Defender Advanced Threat Protection for Server 2019
Surviving a Ransomware Attack with Azure Site Recovery Volume 1
Migrating and Upgrading to Server 2019
3 Books
$239.85
Suggested Price
$99.95
Bundle Price

Table of Contents

Chapter 1 17

Setting up your Azure Subscription from Scratch 17

Chapter 2 24

Building a Hyper-V Nested VM with Multiple Public IP Addresses in Azure 24

Building a Windows Server 2016 Virtual Machine 24

Creating Multiple Internal and External IP’s for the Lab 35

Enable Hyper-V in the LAB Virtual Machine 42

Configuring NAT Networking with one Public IP Address 50

Configuring NAT Networking with Multiple Public IP Address 53

Adding an IP Address to the lab Host (VM) 53

Configuring Routing and Remote Access on the Azure Nested Virtual Machine 57

Configure NAT Rules in RRAS for the Lab 65

Disable Windows Firewall 72

Create a NAT Rule in the Azure NSG for the Lab 74

Testing the NAT Rules in the lab 80

Using PowerShell to automate RRAS NAT Rule Configurations 85

Chapter 3 88

Using BigDemo to Build your Lab 88

Lab Server Names 88

Building the Lab with BigDemo_ASR_WAC.PS1 91

Chapter 4 95

Configuring Windows Admin Center 95

Install Google Chrome and Mozilla FireFox 96

Configure Windows Admin Center 97

Configure Azure Integration 99

Configure Azure Backup 104

Verifying Backups locally with the Backup Microsoft Azure Backup Agent 110

Configuring Windows Azure Update Management 112

Configure Azure Site Recovery 119

Upgrade to Security Center Standard in Azure 125

Chapter 5 127

Windows Defender Advanced Threat Protection ATP 127

Onboarding a Server with Windows Defender ATP 128

Reviewing an Incident with Windows Defender Advanced Threat Protection 130

Chapter 6 133

Simulating a Ransomware Attack 133

KnowBe4 Ransomware Simulator on Windows Server 2019 133

Enabling Ransomware Protection on Windows Server 2019 141

Executing a Ransomware Attack with PowerShell 145

Chapter 7 152

Recovering from Ransomware using Azure Site Recovery 152

Notes from the Field 152

Why Airgapped Replicas are the only choice 152

Why Planned Failover is no longer an option 152

Failover Now is the only Option 153

Watch you Six (Clock) 153

Do not connect your Azure Site Recovery Virtual Machines to a live Site-to-Site VPN 154

When can I get back into my data? 154

Ok, so I didn’t listen and lost everything now what? 155

Don’t forget to tune your Replication Policy 156

Testing Failover can be a quick Ransomware Fix 156

Reset Settings for your Azure Site Recovery Hyper-V Host 157

Enable Diagnostic Logging for Azure Site Recovery 162

Zero Day time to Failover 163

Assuming an Admin Level breach Failing over 100 % to Azure 163

Executing a PowerShell based Ransomware Attack on Domain Controllers. 163

Encrypting the Sysvol Folder 165

Taking Down Production Killing Domain Controllers with Ransomware 171

Encrypting the Active Directory Database 171

Survival Mode Recovering to Azure 178

Tick Tock time to make a decision – We are Recovering to Azure 179

Performing the Double Swing Recovery 180

Chapter 8 188

Disaster Recovery items left forgotten 188

Chapter 9 189

Join us at MVPDays and meet great MVP’s like this in person 189

Live Presentations 189

Video Training 189

Live Instructor-led Classes 190

Consulting Services 190


Other books by these authors

Authors have earned$8,070,490writing, publishing and selling on Leanpub,
earning 80% royalties while saving up to 25 million pounds of CO2 and up to 46,000 trees.

Learn more about writing on Leanpub

The Leanpub 45-day 100% Happiness Guarantee

Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

See full terms

Free Updates. Free App. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers), EPUB (for phones and tablets), MOBI (for Kindle) and in the free Leanpub App (for Mac, Windows, iOS and Android). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses! Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks. Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. It really is that easy.

Learn more about writing on Leanpub