Surviving a Ransomware Attack with Azure Site Recovery Volume 1
Surviving a Ransomware Attack with Azure Site Recovery Volume 1
About the Book
Have you been the victim of an Ransomware Attack? Are you worried about Ransomware and how to defend against it? Well if so then this book is for you. This step by step guide will show you how to use Microsoft’s Azure Site Recovery, Windows Defender Advanced Threat Protection, Window Admin Center and more to build your Cyber Security Defense against Ransomware.
This book details how to use Ransomware Simulation tools to test your Anti-Virus and Anti-Malware. It also includes a live scenario showing how a Domain Controller can be attacked and how to recovery for this attack.
From all of our Authors at MVPdays publishing we hope you enjoy this book. Follow us @MVPDays @DaveKawula and @SuperCristal1 for the latest details on all of our community work.
Bundles that include this book
Table of Contents
Chapter 1 17
Setting up your Azure Subscription from Scratch 17
Chapter 2 24
Building a Hyper-V Nested VM with Multiple Public IP Addresses in Azure 24
Building a Windows Server 2016 Virtual Machine 24
Creating Multiple Internal and External IP’s for the Lab 35
Enable Hyper-V in the LAB Virtual Machine 42
Configuring NAT Networking with one Public IP Address 50
Configuring NAT Networking with Multiple Public IP Address 53
Adding an IP Address to the lab Host (VM) 53
Configuring Routing and Remote Access on the Azure Nested Virtual Machine 57
Configure NAT Rules in RRAS for the Lab 65
Disable Windows Firewall 72
Create a NAT Rule in the Azure NSG for the Lab 74
Testing the NAT Rules in the lab 80
Using PowerShell to automate RRAS NAT Rule Configurations 85
Chapter 3 88
Using BigDemo to Build your Lab 88
Lab Server Names 88
Building the Lab with BigDemo_ASR_WAC.PS1 91
Chapter 4 95
Configuring Windows Admin Center 95
Install Google Chrome and Mozilla FireFox 96
Configure Windows Admin Center 97
Configure Azure Integration 99
Configure Azure Backup 104
Verifying Backups locally with the Backup Microsoft Azure Backup Agent 110
Configuring Windows Azure Update Management 112
Configure Azure Site Recovery 119
Upgrade to Security Center Standard in Azure 125
Chapter 5 127
Windows Defender Advanced Threat Protection ATP 127
Onboarding a Server with Windows Defender ATP 128
Reviewing an Incident with Windows Defender Advanced Threat Protection 130
Chapter 6 133
Simulating a Ransomware Attack 133
KnowBe4 Ransomware Simulator on Windows Server 2019 133
Enabling Ransomware Protection on Windows Server 2019 141
Executing a Ransomware Attack with PowerShell 145
Chapter 7 152
Recovering from Ransomware using Azure Site Recovery 152
Notes from the Field 152
Why Airgapped Replicas are the only choice 152
Why Planned Failover is no longer an option 152
Failover Now is the only Option 153
Watch you Six (Clock) 153
Do not connect your Azure Site Recovery Virtual Machines to a live Site-to-Site VPN 154
When can I get back into my data? 154
Ok, so I didn’t listen and lost everything now what? 155
Don’t forget to tune your Replication Policy 156
Testing Failover can be a quick Ransomware Fix 156
Reset Settings for your Azure Site Recovery Hyper-V Host 157
Enable Diagnostic Logging for Azure Site Recovery 162
Zero Day time to Failover 163
Assuming an Admin Level breach Failing over 100 % to Azure 163
Executing a PowerShell based Ransomware Attack on Domain Controllers. 163
Encrypting the Sysvol Folder 165
Taking Down Production Killing Domain Controllers with Ransomware 171
Encrypting the Active Directory Database 171
Survival Mode Recovering to Azure 178
Tick Tock time to make a decision – We are Recovering to Azure 179
Performing the Double Swing Recovery 180
Chapter 8 188
Disaster Recovery items left forgotten 188
Chapter 9 189
Join us at MVPDays and meet great MVP’s like this in person 189
Live Presentations 189
Video Training 189
Live Instructor-led Classes 190
Consulting Services 190
Other books by these authors
The Leanpub 60-day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
See full terms
Do Well. Do Good.
Authors have earned$11,841,865writing, publishing and selling on Leanpub, earning 80% royalties while saving up to 25 million pounds of CO2 and up to 46,000 trees.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Top Books
The Hitchhiker's Guide to DFIR: Experiences From Beginners and Experts
Barry Grundy, Tristram, John Haynes, ApexPredator, Andrew Rathbun, Kevin Pagano, Victor Heiland, Nisarg Suthar, Guus Beckers, and Jason WilkinsA first of its kind crowdsourced DFIR book written on GitHub by the members of the Digital Forensics Discord Server to share knowledge!
OpenIntro Statistics
David Diez, Christopher Barr, Mine Cetinkaya-Rundel, and OpenIntroA complete foundation for Statistics, also serving as a foundation for Data Science.
Leanpub revenue supports OpenIntro (US-based nonprofit) so we can provide free desk copies to teachers interested in using OpenIntro Statistics in the classroom and expand the project to support free textbooks in other subjects.
More resources: openintro.org.
Ansible for DevOps
Jeff GeerlingAnsible is a simple, but powerful, server and configuration management tool. Learn to use Ansible effectively, whether you manage one server—or thousands.
R Programming for Data Science
Roger D. PengThis book brings the fundamentals of R programming to you, using the same material developed as part of the industry-leading Johns Hopkins Data Science Specialization. The skills taught in this book will lay the foundation for you to begin your journey learning data science. Printed copies of this book are available through Lulu.
Maîtriser Apache JMeter
Philippe Mouawad, Bruno Demion (Milamber), and Antonio Gomes RodriguesToute la puissance d'Apache JMeter expliquée par ses commiteurs et utilisateurs experts. De l'intégration continue en passant par le Cloud, vous découvrirez comment intégrer JMeter à vos processus "Agile" et Devops.
If you're looking for the newer english version of this book, go to Master JMeter : From load testing to DevOps
Software Architecture for Developers
Simon BrownA developer-friendly, practical and pragmatic guide to lightweight software architecture, technical leadership and the balance with agility.
Introduction to Data Science
Rafael A IrizarryThe demand for skilled data science practitioners in industry, academia, and government is rapidly growing. This book introduces concepts from probability, statistical inference, linear regression and machine learning and R programming skills. Throughout the book we demonstrate how these can help you tackle real-world data analysis challenges.
Concurrency with Modern C++
Rainer GrimmC++11 is the first C++ standard that deals with concurrency. The story goes on with C++17, C++20, and will continue with C++23.
I'll give you a detailed insight into the current and the upcoming concurrency in C++. This insight includes the theory and a lot of practice.
Optics By Example
Chris PennerA comprehensive example-driven guide to optics. Examples in Haskell, but adaptable to other languages.
Become a data-manipulation wizard using optics to manipulate data!
This book takes you from beginner to advanced using Lenses, Traversals, Prisms, and more!
Functional Event-Driven Architecture
Gabriel VolpeExplore the event-driven architecture (EDA) in a purely functional way. Learn to design and develop distributed systems that scale. Identify common design patterns in such systems.
Take your functional programming skills to the next level by joining me in developing a distributed system powered by Apache Pulsar and Fs2 streams, all in Scala 3!
Top Bundles
- #1
CCIE Service Provider Ultimate Study Bundle
2 Books
Piotr Jablonski, Lukasz Bromirski, and Nick Russo have joined forces to deliver the only CCIE Service Provider training resource you'll ever need. This bundle contains a detailed and challenging collection of workbook labs, plus an extensively detailed technical reference guide. All of us have earned the CCIE Service Provider certification... - #2
Practical FP in Scala + Functional event-driven architecture
2 Books
Practical FP in Scala (A hands-on approach) & Functional event-driven architecture, aka FEDA, (Powered by Scala 3), together as a bundle! The content of PFP in Scala is a requirement to understand FEDA so why not take advantage of this bundle!? - #3
Software Architecture
2 Books
"Software Architecture for Developers" is a practical and pragmatic guide to modern, lightweight software architecture, specifically aimed at developers. You'll learn:The essence of software architecture.Why the software architecture role should include coding, coaching and collaboration.The things that you really need to think about before... - #4
Modern C++ Collection
3 Books
Get All about Modern C++C++ Standard Library, including C++20Concurrency with Modern C++, including C++20C++20Each book has about 200 complete code examples. Updates are included. When I update one of the books, you immediately get the updated bundle. You can expect significant updates to each new C++ standard (C++23, C++26, .. ) and also... - #5
Pattern-Oriented Memory Forensics and Malware Detection
2 Books
This training bundle for security engineers and researchers, malware and memory forensics analysts includes two accelerated training courses for Windows memory dump analysis using WinDbg. It is also useful for technical support and escalation engineers who analyze memory dumps from complex software environments and need to check for possible... - #6
All the Books of The Medical Futurist
6 Books
We put together the most popular books from The Medical Futurist to provide a clear picture about the major trends shaping the future of medicine and healthcare. Digital health technologies, artificial intelligence, the future of 20 medical specialties, big pharma, data privacy, digital health investments and how technology giants such as Amazon... - #9
Learn Git, Bash, and Terraform the Hard Way
3 Books
Learn Git, Bash and Terraform using the Hard Way method.These technologies are essential tools in the DevOps armoury. These books walk you through their features and subtleties in a simple, gradual way that reinforces learning rather than baffling you with theory. - #10
Static Analysis and Automated Refactoring
2 Books
As PHP developers we are living in the "Age of Static Analysis". We can use a tool like PHPStan to learn about potential bugs before we ship our code to production, and we can enforce our team's programming standards using custom PHPStan rules. Recipes for Decoupling by Matthias Noback teaches you in great detail how to do this, while also...