Today we are going to be looking at some real-world programming. This is something as someone who writes or creates tutorials for Programming who go, oh, can you give me a real-world scenario for that? Well, a real-world scenario is whatever your problem is. So we're going to write a program here a bash script today Using the rules I've talked out in my previous video, which I'll talk about in a moment But basically we're going to do something that I have to do at work all the time Although I think the solutions have gotten better. We still don't have great solutions as a firefighter I need to make sure that our medical supplies are always stocked. So for the station or truck I have to make sure that we have so many gloves so many masks so many Band-aids whatever and somebody I do regularly in the interfaces like I said have gotten better But aren't perfect today. We're going to look at doing it with a with a bash script Which is something is the way it should be done, but the real-world scenario scenario Unfortunately, most people don't use text interfaces even though in many cases for something like this or far spirit to a GUI interface In a future video, we'll look at making GUI interfaces using HTML and Java script And then we might even do redo it again the same code again using Godot and so you can compile stuff or package stuff for Windows Mac Linux everything I'm going to do today is Cross-platform runs natively on all systems. It's going to be a bash script or a shell script in general And we're going to use primarily core tools Echo read W get all these things can be found in one binary Busy box, which will run on all systems. You can get binaries for it for Windows These type of tools are already going to be on your Mac and Windows or Mac and Linux systems and your Android systems Probably already have them if you have it a terminal emulator installed The only thing outside those core tools that we're going to use is FZF Which is a free open-source lightweight tool for filtering and searching through Lists in a fuzzy way meaning as long as you type something kind of like what you're looking for It should come up in the list and you can select it and again, that's how you can get binaries for Windows Mac Linux BSD will run on your Android device So you just would have to install it and it also you can get arm compiles for it Like I said so they can run your Android devices the way I'm going to do this It's like I talked about in a previous video where I talked about my rules We're going to try to limit what the user inputs force them to select from lists The lists are gonna be searchable hence the FZF and but we're gonna start off We're gonna I'm gonna show you how quick rapid development. We're going to create this application Really really quick to someone who is branded programming how they would do it But then we're gonna improve upon it to show you that you can write a program like this in a couple of minutes But then taking a few more minutes. You can make it a hundred times better Let's jump right in. Okay. Here. We are also. I want to say this isn't like a step-by-step tutorial I'm gonna be going pretty fast But basically give you the concepts of why I'm doing and why I'm doing them You can see we are in a directory with nothing. Let's go ahead and create a script I'm gonna use Vim as my text editor use whatever text editor you prefer as long as it's text editor and not a word document editor I'm gonna call it order Dot sh Okay, we're gonna start off with our shebang line saying that this is a bash script or whatever shell you would like to use Now to do this all we have to do is basically some read commands. So read Dash P for prompt and we're gonna say let's copy that a couple times. Whoops That's from the last tutorial Okay Enter your station And we'll say station here. We'll say enter your name and we'll say name and we'll say Item to order item and we'll say how many and We'll just call that one Qty for quantity and that's all you have to do to get the information from the user and we're gonna submit this to a server I've set up a script Let's see. Let's go here You can go here films like Chris comm forward slash scripts forward slash 2022 Medlist we have a few things here for this first part. We're looking at the submit PHP Basically, we're gonna submit it and it's gonna it's not gonna actually log anything. It's just gonna echo back Let's say we were 10 gloves. I would say 10 gloves ordered by Chris for station, whatever So that's what we're going to do. Let's actually go ahead and copy this URL and It'd be best to put that in a variable, so I'm gonna say URL equals Paste that URL and down here. We're just gonna say W get dash Q for quiet because we don't want the you know showing how much has been submitted uploaded But we're just gonna output the response from the server to the shell next. We're gonna say dollar sign URL And I'm gonna say Question mark and we have our variables. I'm gonna say station Equals dollar sign station, which we collect up here. Okay next variable and name equals dollar sign name and item equals dollar sign item and dollar sign Quantity or sorry, we got to say Qty equals quantity you might ask why I put curly braces around this I really should be more consistent and do it around each of them if I'm gonna do it basically I am I Don't like that. It was gonna be next to this dollar sign here. I don't think it matters. Let's see my color Oops color coding should tell me it's okay not to have the curly braces. I'll leave that so I don't confuse you I have videos on why you would use curly braces in certain situations So we save that we'll make it executable only have to do this once once it's copied to a system and then dot slash That and it's gonna say enter your station I'll say station 20 and I meant to put a space in 20 And again, this is why I going back to the rules of selecting from a list and not letting the user input stuff even there I already messed up and didn't put a space in there or may I just type 20 and not station 20 What do they want? I don't know. I'm just typing something in anyway Do I type my first name last name here last name then first name? I'll just say Bob Smith, which is not how I would want it, but that's how a user would probably input it What am I gonna order? gloves Excel or is it Excel gloves again if you don't give them a list They don't know what to input and it's gonna your database transsearch. There is gonna be horrific and in how many will just say 10 and It's submitted to the server it responded 10 gloves Excel have been ordered by Bob Smith for station 20 So to write a program that submits an order a supply order That's all you have to do thing is now if I want to order something else. I got to run the script again I have to choose my station again. I have to choose my name again and again Inputting this stuff manually is just not a good idea. So let's go ahead and make this better First off, let's use fcf and let's use lists So if we go back to my web browser here again films like Chris comm 4 slash scripts 4 slash 2022 and Medlist I have three lists here. I go here. They're not gonna look at lists But if I look at the the raw data, you can see they're written as lists Why did I make them PHP files and not text files? So they display properly in the web size because I'm assuming that you wouldn't have a static list You probably have a database that this is being generated from so if I was to grab the URL for here And let's say I was a W get dash q capital O and you could use curl if you prefer I do that I get my list That's great The list is somewhat alphabetized, but not really so I can just pipe that into sort like we've talked about and now I have an alphabetized list. How do you select from that? That's what fcf is for so let's go ahead We're going to grab our URLs here So what I'm going to do here is Now I could put the full URL for each one But I would say in general That's that could cause problems down the line So what I'm going to do here is I'm just going to say URL for this and Give it the directory list and then I'm going to create a variable called submit one called Stations One called names One called items. So I'm going to say equals dollar sign URL forward slash Submit dot PHP For stations I'm going to say that way if you move it to a different all these files to a different directory on your Website you just have to change the URL variable once and not every single line stations dot PHP dollar sign URL Names dot PHP and hopefully I'm Doing all these properly This should be items not item That PHP and I you know that I don't know if I mentioned earlier in the video I have not oh, it's called medical items. See I need to Make sure I'd enter these properly. So we have name stations and medical items I Haven't written this script yet. I've thought it out in my head, but I have not written it So I might hit some bumps along the way. I wanted to be a real with this I did the server side stuff, but haven't written this script yet, but I've thought it out in my head Okay, so down here for submit What we're going to do is change this to submit, okay, so we have our URLs Why did I put a dollar sign by the names there? Okay? But we're not going to use read at all we're going to use FCF. So let's go ahead and delete all these and First thing we're going to get is stations. So what we're going to do is W get That's Q. I'm sorry dash Q capital O and we're going to pass it Stations dollar sign stations And we're going to want to put that Into FCF. Let's go ahead and come out that comment out this bottom line and dash dash prompt and say Select a station Okay Let's go ahead and run this code see if we've typed everything properly so far. Okay, that's a problem I obviously messed up the URL for that Stations Stay Sean it's stations That's why it was not found. So it's good to test your code as you're going now stations I can type in 20. I get station 20 if I to gives me everything with number two in it I had entered in an output station 20 perfect. Let's go back into here I'm going to say our station equals and I'm going to put that in quotations again. I'm not going over the details of this I'm assuming you know basics of shell scripts for this video. It's not a tutorial but more of an overlook. Okay, so we've grabbed that variable Let's go ahead and just save ourselves some time copy that I'm going to say Name so we're going to get your name and this will change to names and here is I Guess I could have left the select select your name okay from names and Then items we're going to say items and we're actually going to change this later on but I'm going Basic stuff right now again dollar sign We're going to say W get Inside the parentheses Q o dash sign items pipe that into fcf with a prompt of Select an item to order and the last one we're going to get the quantity so quantity equals and then here I'm just going to say Echo zero dot dot 100 I doubt there's any items I'm going to order 100 of but I'll put the list that big and I'll pipe that into We want to have each thing on a new line So we're going to say space replace that with a new line I did that in the other video again. That's probably a better way to do that. We're going to say fcf dash dash prompt and we're going to say How many? We actually use the variable from the item above how many dollar sign item Would you like? Let's just say let's just say quantity or How many sure that works and then we can uncomment that and now if I typed everything properly we're in our script station I'll say station 20. I'll say John again our I our list was not Gloves medical large How many 55 there we go and 55 gloves medical large have been ordered by Foster John for station 20 Let's go back into our script here something. I didn't do with names with names We are going to sort that because the list was not alphabetized now. It is that's how easy it is to make things alpha numeric You just pipe it through the sort command If there were repeat items we could also do sort dash you for unique, but there isn't in this list. That's great so That's that's a hundred times better than the original script and did not take that much longer to write It takes a little more skill. You have to understand shell scripts a little bit better, but again 20 John Foster gloves and 55 and again I'm grabbing the list from the website so that if you have a new employee you just update the list the database online and Right away. They're available on all the computers running this script same with items you add a new item It's automatically there you add in a new you open a new station You add that station in but we can make it better because now or through now if I run again I have to pick my station again. I have to pick my name again I shouldn't have to do that if I multiple items to order I should be able to start up the script Tell it what station my name and then go item station item state or item amount item amount item amount So let's go ahead just exit out of this So what we're gonna do here is all we have to do is just say while one Do should I like to put that on this line here? I think and we're gonna say done let's indent things properly and and The only issue with this is you may not see the output So we have a choice do we pause for a moment so that they know that items that has been ordered We'll get to that in a moment again all these different things you can do Okay, so I'm going to order for station 55 will say this time and we'll say That my name is Mary Swartz Schwartz and Now I'm going to order baby aspirin and I'll order 10 of those and Now it goes to the next item. It's the mid the order That's what I'm saying is right now we didn't see that it was ordered So we probably want to give some output to that the simplest way would just to be Output that that has been ordered for a second and then go back in it might slow down your ordering a little bit If you're one of those people who types really fast, but bio hazard bag So bio bag I'll order one of those next item will say Yeah, just one of these Okay, so we've already improved our script a lot But now also I can't get out of my script without hitting control C a lot which the average user would not know So what we're going to do here is we're going to make some changes So after we submit an order what I'm going to say here is sleep for one second and I might even clear the screen. I do like to clear the screen a lot, which is Well Okay, so let's go back. We'll order again. I'm sorry again So now I'm going to put in my order and also one of these sort of things is if I'm logged in as a user It should know who I am so I shouldn't have to put in my username But we're just saying that we don't for this example. Let's always say station 22 today. I'll say that my name is Roger Alan Rogers, okay, and I can also again if I don't know what I'm looking for I can look through the list right Let's say I want a cuff of a BP cuff. Oh, there we go BP cuff adult BP cuff. I just need one of those That did not work like I thought it was going to let's order something else. Let's just order two of those Hmm. Okay. Let's exhale. I did something in the wrong order here. Oh I cleared the screen at the wrong point That's why let's run it again 22 let's take them something grab random name Yeah, one of these and there we go. I see it has been ordered Okay, or I could just you just have it say order successful or whatever if the order was successful We'll get some adult pads That should say electro pads again I grabbed this medical list just off the inventory from where I work So I didn't create this list I heard 66 of them and you can see there for a second It tells you you can do that. There's different ways Or you can have it prompt you different ways just so people know that they have ordered it Now again to exit out I have to hit control see a couple times. So what we can do here is We can add a few checks Also, I could also have it print out the full list of everything that was ordered at the end. So Let's go ahead and start off with the exiting out properly So I can add to any one of these lists Exit I'm not gonna worry about station and name. What I'm gonna do is down here with item So we're piping this output Into fcf what I can do is I should be able to say Echo I think I could just say Exit or I could say quit. I you like saying quit better quit if I put parentheses around this I think We're also going to improve getting that list which actually let's let's improve that first. Well, we'll test this out again I'm doing this all off the top of my head. So station. We'll say 44 and I'll say Mark Brown there my first option is quit so I can choose that and what I can do here is add in after this I can say Do an if statement I can say dollar sign item Equals quit Which I don't have to worry about case sensitive of it because it's going based on what you selected from a list Well, if that's true then exit Okay Or I could break out of the loop might be better in case I want to do something after this loop So I'll say break should work order so again, I'll 30 station 34. I'll say Mark Norris and I'll order something. I'll order five of these I see it's ordered now. I'm done. I just hit quit and Exits out for me. I have quit. So actually if we come in here, let's get rid of this clear I think that might be better. So now if I do that, I'll say order Again, I'll pick a station 12 I'll pick another mark and I'll order a few items again Baby aspirin, I'll order one of those assuming its bottles now. I'll order a Zip lock bag Three of those. Oh, it's not putting it on new lines. We should so now I quit I was hoping we'd give a full list out there. So let's actually go ahead and hear Them orders after the W get we're just gonna say echo easy way to do that adding a new line So again, we'll go 78 station 78. We'll say brown one of the brown people. What did that sound bad? Thompson brown And I'll just pick a name from the list. I'll say 43 of these there. That's been ordered Again, I don't have to put my name or station I'm just gonna pick something safety glasses for them and you can see it's generating lists So now when I hit quit I can confirm everything that I ordered everything ordered great one issue one last issue With this code is that every time we loop we're saying W get and we're getting the items So we're doing an HTTP request every single time. We don't need that. We don't want that So what I'm gonna do up here is I'm going to say I'm gonna replace items with its output of and We will say Get items inside this So here when the script first runs, it's going to grab the items and then here all I have to do I should be able to just say Echo dollar sign actually no one echo command now Dash and for that so we recognize the new lines. I believe I'm doing that right Dollar sign items Let's go ahead and run our script pick a station Pick a name. Nope. I did something wrong Did you do do do? No, not that ever do echo. I I'm not sure if that is my issue, but we're gonna give that a try again Psycho station select a name Looking for match. I'm missing line 11. Oh Forgot the quotation mark here It's like a station selecting name, okay now I can pick something from the list order it There we go. It's like something else order it Select something else from the list order it and then I'm done. I'm gonna take quit There we go. I mean how long to have I've been recording 20 minutes So let's say you work somewhere in IT There's so many IT guys that don't know how to program and if you don't know how to program You don't really know how computers work This is a very very look at this. We've got 23 lines of code if you count empty spaces blank echo commands. I mean really This is probably 15 lines of actual code and it's not that complicated If you're not a programmer, you might be confused by this But these are basic shell script this will run on any system. It's lightweight So even if you had old hardware, it should run pretty smoothly But this is How it should be done in my opinion I'm not saying it can't be improved upon and yes We did though that first order with those four lines read this read this read this read this submit and done But this is so much easier for the end user because now they select things from lists. It's all searchable They don't have to wonder. What do I enter here? but also It's easier for you because they're not entering things. You're not expecting If they need to order something off the list, they should contact you through email So yeah, I need to order this and then you can add it to the list We're pulling stuff from the server you add to the list and it's there right away next time they run this command They might have to exit out of the program if they already have it running But that's it. I'll post this code up on past been and linked to it in the description of this video And again, if you want to access the lists, they're all here. You'll see that in the script and again The submit just echoes back That with the variables you pass it. That's it. So yeah In real life if I needed to do this for work It was 15 minutes worth of work and it makes life a lot easier again Nowadays a lot of people don't like these text interfaces. It doesn't get any simpler than this though It's it's fast to write it runs on all hardware almost all operating systems at least all modern operating systems natively and It's super simple to use again again, you just have them click on an icon that runs a script I wouldn't expect the average person to open up the terminal and run obviously either they would just type order or item You know medical orders and that but you give them an icon either on their phone or on their desktop computer And it opens up this and they just start typing. It's very clear I mean you might have to walk them through at the first time, but it's fairly clear once you do it once what? They're you're you're expecting from them Bandage bandage ace bandage three inches For these and again the item this item list I just grabbed from my works item list So things could be definitely written better. You can also have in it like off to the side like the minimum order You can just have it listed here It doesn't matter because you know exactly what they're gonna put through so you can parse through that on the server side But that's it and then I'm done I hit quit and they can confirm Okay, all that was ordered and of course on the server side. It'd be dumped to preferably a database But it could just be a log file, which is super simple and you can also have it Text the the person who fulfills the orders When when you exit out of that loop you can have another order or you can just have them have it to where anytime You know, there's new stuff on the list. They get an email Super simple super simple and of course there be a time stamp and stuff on it That's all done on the server side not the client side so they know when it was ordered and now they know who it was ordered from and again things like the station and The the user especially the user a lot times you're gonna be logged into a system They should know who you are although a lot of places have this one everyone logs in or the same user name So that's just weird Yeah Learn to do a little bit of program goes a lot away again This is a text interface which for forms is far superior than most GUI interfaces for stuff On the phone on your phone it would run just like this using the keyboard as fun So like a GUI interface might be a little more convenient for a phone, but this would run fine on a phone but Obviously people feel more comfortable a GUI interface. So in the next video We'll go over doing this sort of thing with With a web interface which of course can be packaged as an application that but why would you do that? So people just log into the website and order stuff Making the list searchable and only having to put in the information once not multiple times And then also I might also go over doing something like this in Godot Which is a game engine, but I love using it for creating Applications as well. So thanks for watching check out films by chris.com. That's Chris the K There's a link in the description to my website check out there. You can check out my scripts my codes You can support me through LibrePay paypal or patreon if you can't support me financially think about liking share of scribe and commenting I hope that you have a great day


It's Hop along Cassidy With action and suspense out of the Old West comes the most famous hero of them all Hop along Cassidy star in William Boyd The ring of the silverspears heros the most amazing man ever to ride the prairies of the early West Hop along Cassidy This famous hero thrills his 60 million fans with action and dangerous adventure In the role of Hop along Cassidy is the popular star of the motion picture series William Boyd And now another exciting story of the early West Hoppy sees red Bloom has settled over the cook shack of the bar 20 ranch thicker than the clouds that hang over the tower and mountains Nothing Hop along Cassidy can do or say seems to make a bit of difference to California Carlson He's just plum fit to be tied and who wouldn't feel that way having the cook walk out and being left with a pile of dirty pans half way to the ceiling Just waiting for you to run down Up and quit mooning around all the time after that gale in town Oh, and he's a fine girl, California, and if Clem could get his feet on the ground. They'd make a mighty fine young couple I know what you're thinking mr.  What are you going to use for money? I got that planned out, too Look Clem your power is the best friend I ever had when I really needed one I'd like to be your friend, too. I know the claim your power left would bring in something not fast enough I gotta do something quick Earl Chapel is taking out gold right next to your claim girls of mine I'm a cattle man get yourself a job right in stage that he's good Yeah, the only ombre making anything out of the stage is the gunsel who held it up twice the one they ain't caught But they will and whoever catches them will get a nice reward Some fellas don't mind being bossed around, but I'm sick of it. I'm getting my own spread and I'm getting it quick I don't like to hear you talk that way Clem Feller gets his mind on the wrong prank and he's bound to get in trouble Well, that's the way you feel about it. Maybe you better look under my coat. Maybe I'm stealing one of your year Oh, come on Clem, that's not part company that way you just remember your job is always waiting for you That's right nice of you, but I'm striking out for myself if my plan works out I'll be owning one of these spreads right Prado Well so long much obliged for everything mr. Cassidy, and I'll leave them pants as a present from me to you, California Boy, they're done great California hold it forget the pan Yeah, forget them. Let's settle up. I got a feeling Clem's gonna need help and right soon There's only two trails he can take California the honest one and the other Yeah, the other trail ends at boot Hiller and the end of a noose I hope I'm wrong, but I see some mighty strong indication that that's the trail Clem's taken Now back to hop along Cassidy and our story hoppy sees red Clem Hodgins son of one of hop along Cassidy's best friends has quit his job at the bar 20 ranch to get enough money to buy his own ranch He didn't explain how he was getting the money just that he'd get it He rode off the ranch into town and stopped at the home of Emmy Purcell Hi, Emmy Clem What are you doing in town? Can I come in a minute? Of course you can Thought you wouldn't come to town on Sunday mr. Cassidy let you go for the day Ain't working for Cassidy anymore. You what? You mean you quit your job again. I knew you'd spot off Emmy But I just made up my mind. I ain't getting anywhere on day wages Clem Hodgins After mr. Cassidy was good enough.   Don't say we're quits until you hear me out. I've got other plans for there Ain't any other plan except work and you know it I'm gonna have a big spread lots of grays and lots of water Well, you might as well know Clem there ain't no denying. I'm in love with you But I can't live my life out with a man who won't work Just give me a little more time in me. I'll prove. I know what I'm doing Why don't you work your mind like Earl is doing? He's taking out gold every week too slow I ain't a minor in me. I'm a cattle man. Oh, we'll say no more about it for now Good afternoon, Amy Why sure Come on Clem's here Hi, Earl. Hi Clem glad to see you didn't expect you till Sunday. I quit. Oh Yes, you know what you're doing But how about working with me at the mine? Why I got other plans sit down here. Oh, I can't stay I mean I just saw Clem's horse outside I got to get over to the Fargo office shipping out three thousand dollars of gold dust to Denver That's good seven weeks work, but it's worth it I Don't quite know how to say this Clem, but if you could use it to get started you're welcome to it Oh, you don't mean it. Amy is just showing off Clem. Is that any way to talk to your pal? Well, it's just any way for you to talk to your intended. I ain't married you yet Clem Hodgins not yet See Jake Miller anywhere at California. Nope. I'm sure there much smoke. I can't see 10 feet Wait, I see him. He's coming this way. Find a way to run a Fargo office. I have to look for the agency saloon I'm looking for you too Jake. Yeah What for better come outside the smokes too thick in here? What you want to see me about I wanted to know if package came from beyond the stage this morning Nope, nary a thing. Hey, but I was just wondering if you'd help me a bit. Well, I don't know You know anybody high up in the Fargo company. No, guess not. Why? well These words that they're gonna cut out this year stop and go by the way a rocky point on the counter the hold ups We're having there here. Why it'll leave me without a job. I see Yeah, well, I guess I can tell you this hoppy There's another shipment going out this afternoon Scared it'll leak out. Well, I gotta go over the store of the list and I'll stop by the Fargo office and see what we can work out Darn it. I just know you do something. I feel better already See you in 10 minutes Jake You know hoppy you'll be a watchin there's something funny about that fella funny yep them watery eyes He's as phony as a 35 cent sapphire You mean you're just now figuring that out What can I do for you Clem Hodge and I'd like to kind of square up and pay my grub debt Sarah you hear that will now There's an honest man Like to look at one up close like I'm you know Will Tudor drives a stage for Jake. Oh, yeah, howdy. Howdy Well, how much old you Sarah now? Let's see Clem. There was that Before you start figuring that Sarah can you get these things together? Huh? Some cowpup. Just give me this list here asking if I'd drop off the grub to the widow plumber's ranch I don't mind helping out but dog on it. It's two miles off the stage road.  Well, sir. Now you made yourself a deal Clem Sure, I want nobody to go hungry. Well gotta be getting back to the stage devil. Oh, have a good trip. Well Yeah Just take me a minute to get these things together teams hitched to the spring wagon out back Clem and and watch out for the G horses flyer no, you're gonna eat. Don't worry me None. Well, hey your tears beans flour bacon and sugar Got it. Well, I'm there in no time. You figure on my bill. Well, I'm taking these maybe better wait till the stage is gone Don't worry. I'll beat the stage over the path. You're sure a powerful hurry See now last month Clem got you in the back here and he was already at home Well, if that ain't hop along and California howdy boy, hello, sir I gotta get a pile of groceries. I'm sure glad to see you come in California. I got something for you It isn't some more crackers with cool oil on them is it Sarah? Not this time What is it? Jelly beans look at you. Well, bless your sweet little heart here. Hello copy red ones black ones green one Yeah Sarah wasn't that Clem Hodgins who went out the back door a minute ago? Yes, sure. What? What's his hurry? Oh, he offered to deliver some groceries out the post road for me and post road Is there anything wrong? No, yes, not I told him to wait till the stage went out in that narrow pass But he wouldn't wait. It's all going funny. He ain't got nothing else to do. He could have waited Sarah here's the list. We'll be back later and pick them up. What's your hurry? I just thought of something I promised Jake. I'd see him at the Fargo office. Sure. And your problem for God it hoppy Goodness yeah, like a lot dependent on a life might depend on this Sarah, but not mine Hope we're not too late California Hope the stage hasn't left yet. Maybe it should Nope, it's side of the bar go off. It's still here. Good. Let's get in the office and see Jake right away We'll wait Jake. Well, didn't notice you come in. Mr. Cassidy. How are you? Fine Earl? How are things working out the mine? Well fair making a little steak now and then better than a lot of them are doing Yeah, I guess so Sending 3,000 out to Denver today. Good if you almost missed the stage with it did it on purpose Waited till the last minutes. There's no one that know beforehand Thanks, let's hope it gets through this time. Ain't nobody knows it's going aboard Earl's to help me. That's the way it should be Well glad I saw you hoppy. Same here. Oh good luck. Thanks. I guess I have been pretty lucky with everything There now now you see hoppy he says I talk too much and look at them there fellas lounge in the front of the bar Seeing him come in with the package and knowing what it is and seeing him go out without it Well, maybe we can save your job Jake and say somebody else a lot of trouble if my plan works plan What is it hoppy? That's kind of simple like you say you have to do something Looks like everything went off without a hitch. I wouldn't say that California Well, what are you looking down the road for rider coming in the town beating the dust? Hey, sure is riding like a twister's after him that riders bring a news California. Let's stop him right What happened looks like something went wrong with our plan Jake Oh, I was a peer to just this very thing Hoppy you're done the best you could From the store. What's wrong, Sarah? Hoppy the horse is just running the back of the store with a spring wagon. What's wrong with that? But don't you see Clem Hodgins ain't on the wagon Now back to hop along Cassidy in our story hoppy sees red Clem Hodgins has quit his job as cook at the bar 20 He wants a big spread lots of cattle and lots of Grayson, but he hasn't told anyone how he's going to raise the money Clem hurried out the stage road an hour ago and now word comes that the stage is again been held up The wagon came back to town, but without Clem Sure, I can prove that Clem didn't touch a grain of that gold You can prove it when he's locked up. I'm going off to his cabin and bring him in How could Clem steal something that wasn't on the stage? California's right. There wasn't a smidgen of gold on the stage.  I tell you there's no gold on that stage another You're wrong. If this ain't golden is about I'm a master.  What do you say Cassidy? Don't look like Jake played along with you Clem What are you doing in my cabin reach Clem? No funny stuff. I'll take that soup and iron Get out of my house all of you the horses and wagon came back to the store Clem I don't care if they're running the river That brunt got scared of a rattle and run off the trail Throwed me out and I've been walking back. You don't need to walk no further You're right in the rest of the way Clem for what they're holding up the stage Yeah, what do you want I? Come to see Clem for any seein him will be right behind bars because that's where he's staying Could I have a word with you Sheriff? Oh, I'll have a word with you, but if it's regarding Clem, it's time wasted Go on in Amy. See where you can Someone to see you Clem. I don't want to see nobody Clem I just come to here. You tell me you didn't do it. You couldn't do a thing like that Eat much use in talking now Amy seeing you like this Here and you say my name. I could never believe it. Even if they send your weight I'll wait till you get back best forget it. I mean They send me away for something. I didn't do it. I Ain't gonna be no good to anybody if I come back Yeah, come on in Jake. Hello Jake. Well, I'll be in California say this to regular meet Just like to have you answer a few things Jake. Now you look here Sheriff hoppy knows I ain't mixed up in this No one said you were well, I should think not after all it was your idea in the first place Oh, why didn't you follow hoppy's idea? Yeah, why did you change our plan? Well, I Need to change plans. What are you talking about? If you don't mind gents, I'm the law around here and I'll be asking the questions Hoppy says you plan not to ship gold on that stage Turn right there. That's what a plan. That's what I've done. You mean no gold was shipped. No, sir Now you think well, I'll be don't make no sense I'll hold up where there ain't no gold stolen but still we find the stolen gold in the fellas cabin the same gold It's supposed to not be sent sure if you think I'm lying. I'll go get the package Well go on and get back here Prado Might answer one of the questions and if it does then we got to get the answer to where Clem got the gold We found in his cabin maybe from his mind. Oh, he ain't worked an hour in them diggings And nobody's given anybody a pouch of that stuff Come on in well we want to details of what happened What the boys say you caught Clem red handed I wish we were as sure as you are will mean and what for that remark Cassidy Shatter yourself there will let's have the story Just like the other times about three miles out going through them crags fellas stepped out in the trail and throw down on me Nothing I could do did he say anything didn't hear nothing Had a blue handkerchief over his face. You know Clem heartians was it him? Couldn't rightly say looked about his size. That's not much help sure Wait hold on a minute. I just thought it's done After I threw down the pouch this guns will wave me out Gone about 30 rods when I seen a spring wagon pulled off the trail kind of hitting the mesquite and rock spring wagon Go on will look like a wagon. I've seen lots of times down to the general store All dust color broken seat California is getting kind of late I think we better get things finished up I'll write a list of what I wanted to store and you get to the note sir right away She's got the list not this list. Well, did you know there was gold on that stage? Well, of course the pouch was locked up. No way telling here California gives her this note and hurry while the store still opens Right Well, I guess I told you everything sure I'm gonna go down to the brass now now and get some vitals. I'll be right back. Yeah, I guess things. It's pretty shattered now No more when Jake gets back. Yeah if he gets back What do you mean by that happy just thinking out loud sure? Sorry?   I thought maybe you and I could talk while you eat Guess there's no law get it. Oh, I almost forgot sheriff if California comes back before I do tell him to meet me at the brass knob I may be needing him For the last time Cassidy I tell you it was that dirty old dusty wagon with a broken seat Belongs to the general store. I guess I recognize that's the same story. You told the chair of course It is now. I'm a go and I've been arguing with you for an hour. It's been worth it Took a neck right out of a noose Nick I Don't see how my story is helping claim Hodgins nun. That's where you're wrong What are you looking out the back window for come here? Will look out this one What if you can nothing I want to see over there, I think there is look There's the store wagon No, it can't be I'm going local Bright red. Yeah, the general store has a red wagon not a dirty dusty colored-looking wagon like you said Well, I'm sticking to my story It ain't no fairy yours. It's a mighty important affair of yours. Will What's wrong with we are like to knock me down you seen a ghost or something yeah red ghost come on California We got a lot of work to do fast now. I know for sure who held up the stage No, I'm following will tutor We got to get where he's going before he does you know who done enough he known for several hours But the confession is the only way we can pin it on him Because you can't get a confession from a dead man I'm here to settle the score with you your double cross and swine Tell them they're wrong about the wagon having me say it was dust colored when all the time it was red I didn't want to do it in the first place and now we're caught. Well, what do you got to say? Don't you reach for that gun? Now back to hop along Cassidy drop that gun. I'll chapel drop You winged him hoppy. Come on. Why did you have why did I wing your earl? Because I don't want to be in the same condition as will tutor Will came here and acted like a madman. He threatened me. I had to save your strength You're gonna need it when you get back to town to explain why you and will tutor frame Clem Hodgins Mr. Cassidy, I'm happier than I ever been Clem promised me he'd go to work. Yeah, but Clem How come you were so all fired anxious to get out on that stage trail? That was mighty suspicious Well folks had laughed at me if I told him I was going to try to get the reward from the capture the gunman That's what I had in mind. Whatever made you think Earl did it, Mr. Cassidy It was simple. We didn't ship the gold, but it was found in Clem's cabin Earl had will tutor push the pouch off somewhere in the brush where it wouldn't be found Took a small bag of gold and hit it in Clem's cabin But why would he do that to Clem his best friend? He had lots to gain. His mind came up against hard rock So he's been tunneling in the Clem's mine. Then of course with Clem gone. And he would need protection Earl's protection. Well, she won't need it anymore, Mr. Cassidy And if my cook's job is still open say the word, oh that my friend is the best news yet California means that Clem. But what I can't understand What made tutor the stage driver spill the beans? Ah, your story was too perfect. That would be broken down But how did you do it?  Ah, now what's wrong, sir? Well, I got that dirt note you sent me. Aren't you done what you told her? Yep, I did. I've done what you told me, but answer this. Answer what, sir? How am I gonna get this dirt and red paint off of my head? And so an exciting adventure ends for Hoppy in California They'll get back to the bar 20 just about roundup time and settle down to a peaceful ranch life But we've a hankering it won't last for very long Somewhere there'll be trouble and that's when Hoppy will ride out into another dangerous escapade Apollo and Cassidy star and William Boyd is transcribed and produced in the west by Walter White Jr Hoppy C's red was written by Howard Swart All stories are based upon the characters created by Clarence E. Mulford This is a Commodore production


Welcome to Ops 101, Securing Your Hybrid Environment. Today, we're going to be talking about all things Azure Security Center. Joining with me today is Sarah Yang. She's our senior PM for all things security here at Microsoft. Sarah, welcome. Hi, thanks for having me. Today, we're going to be discussing specifically around Azure Security Center, and what it can be used for in regards to securing your hybrid implementation of on-premises in Cloud architecture. There's been a lot of name changes that have occurred. Can we first start with that because that's one number one question that we've been getting thus far in terms of what's going on with all the name changes. Yeah. We've had a lot of name changes in the last couple of months. I do think they're actually really good name changes because they are standardizing all the different name changes that we have, and all the different naming conventions we have. But specifically around Security Center, we now have Azure Security Center or ASC as we did before. ASC is our free tier of CSPM, which is Cloud Security Posture Management Software. Within Security Center, we have Azure Defender, and Azure Defender is our Cloud Workload Protection product. That's the paid for element of the suite of products, and that protects against different threats. I actually have, and here's something I prepared earlier. It's going a little bit outside, but I think it's a really good diagram you can see here. We have a lot of XDR offering, it's called Microsoft Defender, and that splits into two halves. We have Microsoft 365 Defender, which we're not talking about in this session, but as you can see, Endpoints Identities, Apps, et cetera, and Azure Defender on the right-hand side there, that's talking. This is our threat protection on the Azure and server endpoint side, so for SQL, for your network, IoT, App Services, Containers, Server VMs, and all of those different products together constitute Microsoft Defender. Now, I know there's a heck of a lot of different names, and we do change them, so hopefully this diagram helps. I think this is a pretty good one to help explain things, but yeah, we got a lot of things out there. The other thing that's really good to look at, if you're still understanding where everything fits all the different Microsoft products, is looking at the Cybersecurity Reference Architecture. It's a very, very busy diagram, but it does show where all of the different Microsoft products sit, so that's worth checking out too. We're going to come back to Azure Defender later on. I definitely want to touch on the IoT piece, which we're seeing as the new architecturally hybrid solution, because your IoT devices are on-premises, or in the real world pushing data up to the Cloud. But I also want to cover the SQL piece as well, because there are a lot of organizations that have that requirement of the SQL servers being on-premises, and we'd love to see and have that talk about how Azure Defender defends those as well. Now what we're going to do is we're going to go through what Azure Security Center can do for your hybrid implementation or your hybrid architecture for on-premises and in Cloud. Take it away, Sarah. Okay. This is Azure Security Center. I'll talk about Azure Security Center first, and then I'll move on to talk about Azure Defender, which is part of Security Center. Azure Security Center or ASC, it's been around for a while. It is a really, really nice tool included within Azure, so you should go look at it. One of the great things about it is that, despite the name calling it Azure Security Center, it can be used for machines and virtual machines that are on-premise or in other Clouds, and we manage them through Azure Arc. I'll come back and talk about that a bit later. As I said, Security Center is a Poster Management tool. We've re-jigged this screen in the last few months. Depending on when was the last time you looked at Security Center, it might look a bit different, but I think the improvements we've made are really good. The first thing we'll have a look at is Secure Score. Now, Secure Score is something that we do use quite regularly in Microsoft. You might have seen Secure Score in Microsoft 365. We do use it in other places, but when we look at Secure Score here, we're looking at Secure Score for your Azure infrastructure and any other Cloud or on-premise infrastructure. If I have a look here, I'm just going to pick one of the subscriptions we've got. We can have a look and see how well we're scoring on a per-subscription. You'll notice that you can be quite granular with this, so you can just use ASC and look at a single subscription, or you can have it roll up and look at multiple subscriptions. In some organizations, we see that particularly if you're going towards that Agile DevOps model, the operational teams are actually taking responsibility for their individual subscriptions. That's why you might want to make the access limited to a certain subscription, and that can be done using our role-based access controller RBAC, or it might be you've still got a central team doing all of it, but we can cater to it either way. You can see here on the subscription, I've just dived into a little bit. The Secure Score on here is 77 percent. I've got 41 out of 54 points. We can see that I've got about a third of my resources are considered unhealthy, about two-thirds are considered unhealthy. Now, what posture management is about trying to get rid of the gotchas, the basic things that you should do, because one of the great things about Cloud and one of the terrible things about Cloud at the same time, is that you can just spin up resources left, right, and center, and you can spin them up quickly and easily. It means that from a security perspective, someone could be just spinning up random machines everywhere, and they may not have the right controls on them, they may not have the right images, and Security Sensor can help with that. We know actually, it's worth pointing out here, we know that a good proportion of security breaches are not initiated or propagated through someone in a hoodie, sorry, tapping on a keyboard, doing some very, very complicated zero-day. Often attackers are using known bugs, things that need patching, or even just misconfigurations. This is where Security Sensor can help, because the posture management and Secure Score can help you see where your machines are not configured to securely best practice, and it can help you remediate them. Obviously, that overall reduces the risk of those misconfigurations being manipulated by an attacker to do something bad. If we have a look, I'll just, now we've recently-ish, we arranged some of these, we arranged some of these how we categorize these. I think it's much more obvious now. You can see here, on top of the list, we have remediate vulnerabilities. When we talk about vulnerabilities, this can be patching, it can be from our vulnerability assessment. ASC, Azure Security Center, does have Qualys as a gray box solution. Qualys is a vulnerability scanner, so that can look for any known vulnerabilities on your machines. But you can see here, we've got Azure Defender for SQL should be enabled, vulnerabilities in the Azure Container Registry images should be remediated, vulnerabilities in your virtual machine should be remediated. I'm going to click on this one, just so you can have a little bit more detail. If you click on one of these, it will to start with, it will tell you all the findings. You can see here, six of the 14 virtual machines in this subscription, they don't have the Windows security update for November 2020. Yeah, don't judge our demo environment. Well, it's done like that so that you can show it, right? It is supposed to be like this. Look, we basically, there's quite a lot of Windows security updates missing on here. You can see that we tell you how many resources are affected by this. There's also an Internet Explorer update there too, and we've also given it a severity as well. We've also given it a severity as well. If I click on that particular finding, it will actually give me some more information. So it will tell me the impact. Now, this one's fairly, kind of fairly obvious, which is if there's no vulnerabilities in your machine, that gives the attacker the possibility to exploit it. It will also give you here the CVEs and the CVSS base score. Now, if you're not familiar with what they are, the CVE is the Common Vulnerabilities and Exposures List. This is a centrally controlled list, which I'll actually show you. It's done by MITRE. And every time vulnerabilities are found, security vulnerabilities, they are logged in the CVE directory. So you can see here generally a CVE ID will be CVE-22. The ID will be CVE-2020, the year it was discovered, and then what number it is for that year. So you can find these for not just, it's not just OSs and Windows. It can be for code. It can be for other programs. But that's where research and some manufacturers will log their CVEs. And the CVSS base score tells you how severe the potential impact could be. So you can go up to 10. I believe 10 is the highest off the top of my head. And it goes down from there. So you might have a minor security vulnerability that ultimately the impact might not be too bad. But if you can get up to a 9.8 and a 10 there, that's actually quite bad. So that gives you an idea of, and as you can see, we in Microsoft have categorized this as high severity. So that suggests you should fix this as soon as you can. So as you can see here, there's lots of CVEs that this particular security update is addressing. And then it will tell you the affected resources here. So we've got some virtual machines. Just here, I wanted to highlight these two servers in the middle. The two at the top and the two at the bottom are virtual machines that are from, that are from Azure. They're actually Azure resources. These two in the middle, just by, you can tell by the change in, by the change in, by the change in logo. They are actually on-premise servers that have been onboarded through Arc. So this is something that you can get for your virtual machines within Azure, but also for your virtual, for any virtual machines that you onboard to Azure Arc. Security center can also monitor them because of course, you know, we talk about all the time, there's no point. Most people are running hybrid environments nowadays. There's no point just monitoring the cloud or just monitoring your on-prem. You need to get this view across everything. So that's something to remember. Do remember that this can, you can onboard, you can onboard on-prem machines and get this sort of information as well. We also give you some remediation. I mean, essentially here the remediation is, please install the security update, but that might vary depending on what you see. I was going to ask in terms of what it actually reports out, is there any difference in terms of the reporting from a virtual machine that's based in Azure, or a virtual machine based in Hyper-V? Would there be a designation on the report out list that you just shared in terms of which was which, if it was on-premises or in cloud, or is it just sees them all as virtual machines? And then reports on them just the same. So it does, on this side of things, the reporting is the same. If you did need to see your, if you did for reporting purposes, perhaps need to see on-prem and in Azure differently, or you needed to know what sort of the delta was between the two. The way that you onboarded those machines into Azure Arc would make that easier because when you onboard a machine into Azure Arc, you'll put it in a resource group. So you'd probably have like an on-premise resource group and maybe put that in a separate subscription. And then what you'd be able to do is see that as a separate subscription, but have it all roll up. There's a couple of ways you could deal with that. But essentially the reporting is the same, but you may, you know, some people may need to, some organizations might need to see them separate. Some organizations, there's regulations that require them to report out their on-premises implementation that is required. This is the security that's being monitored. This is what the report out is in terms of their implementation so they can prove that it's to the spec that's required for the ISO standard certificate that's required, required by the organization to upkeep. Definitely.  Now, you'll only see recommendations that are relevant to the resources that ASC can see. So, you wouldn't see this, you wouldn't see, you wouldn't see a recommendation in here if you've got no resources that it's relevant to. And this is always being updated. So, you can see here, we've got some Azure, we've actually got here a specific on-prem recommendation. Log Analytics agent should be installed on your Linux-based Azure Arc Machines. So, the Log Analytics agent is used for various different things. It's also used for Sentinel, but the Log Analytics agent does need to be installed on any virtual machines that ASC is monitoring. It does use that agent to help it report on things. So, but here, ASC is smart though. It will actually tell you, it does know if there are virtual machines in your subscription that don't have it installed. And as we can see here with this remediation, it actually tells you, please install it because I can't see anything. So, we do make this really, really as straightforward as possible. And particularly, as I said, if you're moving to that DevOps thing where perhaps developers who weren't necessarily responsible for operational security in the past, if they're just learning how to do this, it's nice and easy to do. And where you can see there's a blue box here that says Quick Fix. That's where we've got automated remediation to fix that problem. So, yeah, we love that. So, that means we've got an ARM template or a logic app that would be able to, that would actually be able to fix it. Now, you'll see here, because we practice what we preach in Microsoft that we have the principle of release privilege. I actually do not have sufficient permissions on this demo to select this ARC machine. But if I did, what you would see, you can see here, I would select the machines and down here we've got some, well, they're grayed out for me on this one. You would be able to hit Remediate or trigger logic app and that would actually fix, it would do the automated remediation. We also provide you the ability to look at the ARM template and the actual logic of the remediation before you do it. Of course, because if we're looking at production environments, I'm very aware because I come from an operational background that you can't just necessarily start installing things willy-nilly on operational things. So, in fact, this is a good demonstration of how, as well, you can limit the permissions that people have to ASC. It might be you just want them to be able to look, but not fix, which is what I have here in this particular environment. So, you don't need to be scared that people are just going to use this automated remediation to start making changes in prod without it being controlled and going through your change control process. World-based access control has been huge in terms of the least amount of enablement provided to administrators and users whoever is governing over your organization and have to be granted access and the whole trouble-ticketing capability that can be implemented and permissions granted through that trouble-ticketing. It's such a huge benefit for security forensics. Should something happen or there's a theft of data occurring, the fact that you have this capability of lockdown and granting permissions and then tracking that whole history in terms of the footprints and how that all occurred, huge advantage for people and organizations to keep track of what's going on. And you've probably heard it before. It's cheesy, but it's true. Identity is our new perimeter of hybrid environments when you've got things on-premise and you've got things on the cloud. The only way that you can now build a perimeter, we can't just box everything in a traditional on-prem data center with lots of firewalls anymore. We can't just use the network because of hybrid architectures. So the only way that we can have a perimeter now is to have really strong centralized identity controls. It's the way forward and it's a journey for everyone. And I'm not saying before anyone like jumps at me on Discord or anything. I'm not saying network controls aren't important. I am previously a network engineer in a previous life, but they can't be the only thing we can rely on anymore in hybrid architecture. It just doesn't work. So, yeah, identity and our back is really, really important. There's another half a day run I could go on that we definitely don't have time for. We'll have to do that in the future. Yeah. Yeah, that's a big one. And you can see, as I said, I'm not going to go through all of these, but you can see we've got things like looking at network. As I said, network is important. Applying system updates, of course. Enable auditing and logging. Implement security best practices. Now, here's a good one that I do like to see is done, which is MFA. You can see here that MFA is all enabled on our subscription. This demo subscription is not all bad. And we got our encrypted data in transit, secure management ports. And if you're wondering, these best practices come from a variety of places, but they are largely based on internal Microsoft best practice. The CIS, which is Center for Internet Security as your benchmark and general best practices in industry. So, yeah, this is a really good place to start. If you're still, if you're just starting to move to the cloud and I had once had a customer and I love this description, it's always stuck in my mind. They said that their cloud implementation was a bit of a wild west, that people had just spun things up all over the place. And the security didn't really have good visibility of what anything was, whether it was good, whether it was bad. This is a really good place to start. And because it's scored, it's something that you can actually look to improve over time. And you can track that. And you can track it and monitor it. And you can see how your secure score improves, which is great, because if you're still maybe building a cloud security policy, because the reality is not all businesses will build a cloud security policy before they start moving to cloud. And this is a way to start you off and saying, these are best industry best practices and we are adhering to them. Or this is where we're not. Let's look how we can fix that, etc. So I think this is a really good place to start. So a couple of things I want to reemphasize. MFA or multi-factor authentication, really important. It's no longer an excuse. You don't have to buy a token. You can enable that functionality directly on your smartphone using the app. Or there's a callback feature, what have you. Something you can activate in Azure Active Directory for that type of implementation. So something that you should take into consideration when you're deploying your security strategy across your hybrid infrastructure. The other piece I wanted to make sure that everybody is aware of is your security posture and your governance posture should be planned hand in hand. The cloud shouldn't be the Wild Wild West when you're migrating data up into the cloud and taking advantage of your hybrid infrastructure implementation. Governance is that key that can provide you that guidance in terms of what the organization has said is okay to deploy to spin up in terms of services in your organization. It's something that can be agreed upon by the organization as a whole and doesn't have to be governed by one entity. Think of it as cloud adoption with training wheels or with guardrails so that you don't fall off the bed and you ensure that your organization stays in its secure posture that's required for the implementation of cloud. Yeah, definitely. Yeah, you've got to as you said, your governance and your security standards do need to go hand in hand. It's tricky and you've got to translate often businesses will have had something or organizations will have had something they were using on-prem and it's not necessarily a straight sort of copy-paste but it's an important thing to do so you can actually judge where you're at but I think ASC is a really good place to start if you're still going through that journey and working it out within your organization and of course the great thing is it also will look at your on-premise as well because a lot of these best practices that you can see, they are good common good solid common sense and the vast majority of them also apply to on-premise machines as well so you can use this actually to get a look back at the board machines throughout your arc you can actually see what your on-premise security baseline is as well which might be an interesting experience for some customers depending on how your on-premise how well it's been looked after in the past. That's the important piece, you want to have that uniformity of your virtual machines across on-premises and cloud and so rules need to be abide by in cloud most likely they have to be done on-premise as well so it's something where if you're getting now that standardized this is what we should be at and why we're not there it being reported out in ASC is a huge advantage for organizations to get up to spec in terms of the updates and security patches that are required. Yeah exactly and you know this is you know we have this discussion all the time in security but it's so true is that an attacker doesn't care if your server is in your cloud or on-premise they're going to go for the low-hanging fruit the easiest thing for them to get into it may not be where they need to be initially but if that gets them a foothold in your organization then in your environment then they can start to look to move laterally and move through your environment so if you just concentrate say on patching all your new things in the cloud and you just sort of let your on-prem just do its thing and neglect it an attacker might decide you know may just go for the easiest lowest common denominator whatever's easy I mean attackers don't care where it is they're just going to go for the easiest thing and even if that particular resource that they compromise doesn't have anything of value that could be their point to start pivot throughout the rest of your environment so you know it is important security has to be looked at holistically so you can't just look at say hey we're going cloud first let's kind of just focus on cloud because you know at the end of the day that wouldn't necessarily protect you maybe it'll protect your cloud environment but yeah so we've got to always think about this in a holistic way In terms of your implementation of Azure Security Center monitoring your on-premises implementation you may mention numerous times about Azure Arc is that a requirement for your onboarding of on-premises? Not necessarily there are two ways you can onboard on-premise servers into Azure Security Center our recommended way is using Azure Arc and the way that we onboard to Azure Arc is well the same way you do any Azure Arc onboarding no matter what you choose to use Azure Arc for is exactly the same in fact well here's one I made earlier essentially if you've already got a on-prem machine you want to add you simply add it as a server and essentially you have to click through here fill in where you want to onboard it within your Azure subscription you can put tags on it obviously this isn't going to work because it's a this is me messing around and then it will create for you a custom script that's tailored for that machine and you download and run the script and then it will onboard to Azure Arc and that and so of course Azure Arc has many other uses as well it's not just for ASC but that's our recommended way of doing it and the other way that you can do it that was the only way to do it until Azure Arc came along which is to manually add agents here within Security Center this is probably more fiddly the agent that you have to install is the Log Analytics agent but it is a little bit fiddlier to do it like that we definitely recommend Azure Arc but yeah this is the other way you can do it the cool thing is it doesn't matter which one you install from an ASC perspective at least the functionality is the same but we would recommend you go with Azure Arc which is a way of connecting outside Azure into Azure for many different services so there's a lot of other good reasons to use that so there are your two options so now for more information around Azure Arc we'll provide a link below in regards to where you can find out more information about Azure Arc and its implementation but it's great to know that there is choice in terms of your deployment or your monitoring of your on-premises implementation in the hybrid infrastructure through Azure Security Center one of the big things for me as you mentioned is the manual process that's required outside of Azure Arc whereas in Azure Arc it's all automated is it safe to assume that it also allows you to do multiple implementations of server that's on-premises through Azure Arc really quickly as opposed to doing it the other way where you're going one by one by one installing clients yeah actually to be fair to the when we say manually it is possible to push out this it is possible if you're using SCCM and other systems on-premise that push mass updates and programs you can get the log analytics machine you can use those systems to push the log analytics agent so it's probably not entirely fair to say it's literally one by one by one but Azure Arc is the easier way of doing it it's more straightforward it's something that's designed for doing those things and onboarding there's one other thing I wanted to show from SecurityCenter which is really valuable and we touched on this just before you talked about regulations and regulatory compliance that is something that most organizations no matter what the vertical and where you are in the world most organizations are beholden to regulatory compliance in some way shape or form and we actually have a module as part of SecurityCenter to help with that so you can see here we've got ISO 27001 PCI DSS which is for processing credit card payments we have NIST which is made by the federal government and I'm not going to read them all out here we've got the Azure CIS the Center for Internet Security Benchmark which I did refer to earlier in the recommendations and the regulatory compliance module here it will actually score your infrastructure that it can see against these regulatory standards so if we have a look at ISO here ISO 27001 is a very very common information security standard if you haven't heard of it and you can see here it is actually if we drill down we can see all the different rules within the standard and then we can see where we've got a little red cross that's where we're not compliant where it's grey that means that means that's not an automated control at the moment or it might be something that you have to look at outside of Azure because these standards if you're not familiar with these standards they are holistic for an organization so they're not just necessarily technical standards so you can see here for example human resources security that's something that's part of the ISO 27001 standard but it's not something that ASC can look at because that is a company policy if you see here it's talking about security around prior to employment during employment and termination so for example a prior to employment check would be doing a background check maybe a criminal records check now ASC of course can't we have a lot of intelligence in ASC ASC isn't able to go and read your organization's policies to know whether you can do that so you will see some things greyed out because we can't check them we'll be focusing on the technical infrastructure controls so if we have a look at one of these as you can see we're not doing particularly well in this subscription you can see here segregation of duties we're not adhering to that and as you can see when we drill down it actually links it back to the best practice recommendations and secure score that we were looking at before so essentially it's saying this is the part of the standard we're failing on but this is how you fix it so if I click here it will actually take me to that recommendation that we were looking at previously so again there's still going to be work to do for you but what it means is that it very very clearly shows you links to how you can improve your posture and how it will help you adhere to regulatory compliance which I think is really really cool and as someone who comes from I did work in financial services and before that I worked for a big four organization that did these sort of assessments on behalf of other organizations I can tell you as someone who's had to who's been on both sides of the fence for regulatory assessments doing any of it in an automated fashion is really really helpful because these sort of assessments against standards can be very very time consuming so this is definitely very very valuable so Sarah one of the questions I know is going to come up is what is the difference then between Azure Security Center and Azure Sentinel yeah that's a really good question and we get asked it a lot so Azure Security Center is you can see here and I think this is one of the best diagrams we have to explain this Azure Security Center is what you use to proactively prevent to be proactively stopping security things security issues happening so this is when you can identify maybe where you've got where you've got a misconfiguration or something that's not configured to best practice or you need to do patching and then you can remediate that implement protections and this is all before anything's happened then for Sentinel Sentinel is your seam where it will actually detect security incidents if they happen then that's where you can respond and recover so that's kind of in the incident that's where Security Center and Sentinel sit it's a really good question though and we get asked it a lot I still think people are still getting their heads around it but Security Center is just one pillar of the things that need to be fed into a seam like Azure Sentinel so Security Center or Azure Defender the Azure Defender part of Azure Security Center will generate threat protection alerts and alongside alerts coming from your identity your endpoint, other clouds and network you would send that into your seam so the seam has visibility of everything in your environment and then it will create incidents as appropriate and that's the way that you get proper visibility of what's going on particularly in complex hybrid environments So early on in the presentation you talked about Azure Defender threat protection and its capabilities for your hybrid implementation of on-premises and in cloud. Let's get a little deeper into that. So what does it actually mean and what can you actually do with it? So Azure Defender is a cloud workload protection or CWP product so what that means is it will actually look at the behavior and the heuristics and what's going on in different products within Azure for them on-prem as well and if it sees something that looks like it could be anomalous or looks like a pattern of behavior that we've seen in our Microsoft threat intelligence land it will create an alert so you can see here on the Azure Defender page it shows us to start with what is covered by Azure Defender what isn't isn't covered and you can see Azure Defender does go across a range of different things we have servers, Kubernetes container registries SQL I'm not going to read them all out and then we can see the security alerts here so it actually tells us what security alerts have been raised so this is last two weeks or so here if I click on that we can actually have a look at the security alerts again this is a demo environment so we do have quite a lot of alerts so we can show people what goes on but again these alerts are going to depend on what is seen in your environment and what things you have running but you can see here we've got DDoS attack for public IP that's actually something that will have come from the Azure DDoS service which is a network product that we have but it will report into ASC for example here we've got an exposed Kubernetes dashboard that's been detected for those of you who aren't too familiar with Kubernetes having a exposed Kubernetes dashboard is not good it is something that can is something that can be potentially vulnerable and should be remediated if we go back to the security alerts here are some we've actually got quite a few here we've got potential SQL brute force now SQL of course is something that a lot of people are running in some way shape or form and SQL injection is one of the OOS top 10 web vulnerabilities so SQL brute force of course is not good you can see that someone is attempting to brute force the creds to your SQL server because of course you will log into a SQL server with different creds so you can see here it's mapped to the mitre attack tactics and it will give you the principle name the application the IP address where we think it's come from of course this is a demo so it's not so interesting and then it will also intake action it will tell you what you need to do it's also possible to trigger an automated response here as well to actually fix it so fix it quickly without a person being involved of course there are quite a lot of security alerts what you see of course is going to depend on what's running but we do have coverage for a lot of different things you can see here we have some more SQL injection which of course can be a quite nasty attack if you've got vulnerable SQL things running we've got phishing content hosted on Azure web app of course that's not something you want to see just it's not great to if someone's using phishing content on your web app that suggests your web app has been compromised it's also not good from a reputational perspective we can see currency mining so that's bitcoin mining and then focusing maybe more on the servant infrastructure you can see here we've got failed SSH brute force attack so that's when someone just keeps trying to SSH into a machine with credentials just keep trying and trying and trying we can see suspicious authentication as you can see I'm not going to read them all out but there's many different things here and we're adding to them all the time and of course it's very contextual as to what you will see here but if you see an alert in here based on Microsoft threat intelligence and all the different things all the different threat intelligence that we collect and our security engineers and our threat intelligence folks this is something that you may want to look at so Sarah we covered a lot today in regards to Azure Security Center if somebody wants to continue on their journey in terms of upskilling on the service what's the best resources being available for them? we've actually got now in the last few months we released the ASC Ninja training so that's training that goes through ASC from top to bottom we use it, there's a lot of videos and tutorials and labs so I think that's a great place to start we also have an ASC GitHub repo where there are example logic apps for mediating things so that's definitely worth checking out one of my colleagues the very wonderful Yuri who's on my sister team Yuri runs a regular YouTube series called Azure Security Center and it's fairly bite-sized and it goes through different aspects of ASC, you always interview someone that's worth checking out and you can always go to the the Azure Security tech community and look at the ASC pages where we do write new blogs and you can ask questions and we also have as we do for Sentinel on our other security products we run webinars we we post all the webinars if they're not a good time for you, for me over here in New Zealand the webinars are at 3am so I don't really get up for them post them unless I'm running them I have had to run a webinar at 3am because we do them live but then the recordings are posted to YouTube so you can watch them retrospectively we have them for Sentinel, for ASC for MCAS all the other security products so definitely go check that out too and that's probably a good place to start with ASC and we also have some MS Learn modules as well which we're going to look to and I think that's everything that's a good foundation to look at ASC One possible ad would be the Azure Security Center hub on docs as well that you probably wanted to highlight in regards to your full repository of your vanilla versions of implementation and then looking at tech community for that real-world now guidance in terms of implementing Azure Security Center Sarah, awesome to be with you here to talk about Azure Security Center if people want to get a hold of you what's the best way to get a hold of you on social? That would be my Twitter handle it's at underscore Sarah Y.O or Sarah Y.O so feel free to tweet at me my DMs are open for better or worse so feel free to reach out to me alternatively you can also post questions on the tech community website and that's pecked up by myself, my teammates and other engineering folks as well if you have questions and we're always trying to help out where we can. And if you want to get a hold of me for some reason you can find me on Twitter at wireless life or regularly producing content at itopstock.com Sarah, thank you very much No problem, thanks for having me See y'all Bye


The moment that someone has been waiting for is here. Not since Endgame has there been so much hype going into a superhero film. Yeah, I'm of course referring to the Marvels, a sequel to the billion-dollar first entry, Captain Marvel. Sarcasm out of the way, no one cares about this movie, the MCU's on its last legs, and I've never seen so much baggage be associated with one film. Let's talk about it. I recently did a movie roast on the first Captain Marvel, a film that I thought was incredibly mediocre, not awful by any means, but it certainly has some awful moments. Mainly ones that retcon things in the past or just pretend existed the whole time, like Captain Marvel herself being around in the 90s, yet always on lunch break whenever a major event was taking place. I would love it if you're new here to hit the subscribe button, maybe check that movie roast out, and some of the other videos I have on the channel, I would appreciate it. This review for the Marvels is gonna be spoiler-free, or spoiler-cree, if you will. I'll keep going. And you might be thinking, Adam, the Marvels, plural, meaning more than one? And yeah, you're right, Chad, there is something weird going on, you're Chad for the scenario. It's because there are three this time around. That's right, not just one, but three. Strong female leads! And quite frankly, for a follow-up to the first MCU hit, it's about time.  It's actually really remarkable for Disney in 2023 not to have a movie that panders so hard to everyone.  An hour 45. Yeah, a Marvel movie under two hours. That's clearly meant for family, younger audiences, teens, and me, apparently. A 40-year-old dad whose kids didn't even want to go to this.  Let me get right to the point. I actually had a good time with the Marvels, believe it or not.  It's crazy!   But I prefer to just give honest opinions and not beat them into the ground. We're not gonna be doing 50 videos on how much Brie Larson sucks, although I will say she's still not lead material in the superhero sense. She's a great actress, but in the first Captain Marvel, she was so awkward, so uncomfortably posed all the time and attempting to be stoic. It was just such overkill. In this one, she is paired back a lot, maybe arguably too much. She seems depressed throughout the whole thing. I felt bad for her. I genuinely felt bad for her. Like, she didn't want to be there. That said, she also gets to showcase emotion, something that was also missing in the first film. She's smiling, she's laughing, she's crying. It's crazy.  They're allowing an Academy Award-winning actress some material to work with is what I'm getting from this film. The MCU for me is essentially dead. I'm not looking for a grand world building anymore. The world building has been destroyed seven times over with the introduction of the multiverse, because now different variants of the same actor can appear throughout the multiverse, and so when one dies, another one just takes its place. Oh look, Professor X showed up in Doctor Strange 2. Oh, and he's dead. Oh man, it was brutal when they killed Gamora in Endgame- Oh, and there she is in a different version. Well, at least Robert Downey Jr.'s Iron Man sacrifice goes untarned. They're talking about bringing him back. They're talking about bringing back Robert Downey's Iron Man. Of course they are. Because we have to give people something to root for again. We have to give people a leader they can stand behind. And unfortunately, the whole play of bringing in all the female characters and having them be led by Captain Marvel, Brie Larson, not quite panning out for general audiences, and it is because Brie Larson's character is so damn lame. Carol Danvers has no real character. She's essentially Superman without any sort of weakness. I haven't found one yet, and I'm still a little unclear as to what her powers actually are. She's, I guess, just the sun itself. She's energy. So how do you destroy energy? Eventually I'm gonna get to what I like about this movie, I promise. But there's just, again, there's so much baggage with this film going in, because not only is it following up a billion dollar first entry, and that's only because it was wedged between two of the biggest movies in the MCU, Infinity War and Endgame, but also because there is a lot of homework to do here. There always has been in past Marvel movies, well almost always, in the later phases. But here, you're required to watch several Disney Plus shows if you want to get all the Easter eggs and references and cameos and whatnot. You also have to see a couple of the MCU movies.  Okay, yeah, I understand.   Now I go into these movies looking at just the film itself, if it meets my expectations, what it's going for, and I don't care about cameos or anything anymore. I'm done with all that. Does the movie work on its own? That's how it should be, right? And for me, the Marvels does work on its own. I was having a good time. It felt like a 90s movie, like a pulpy, fun, action-packed adventure with a good trio of characters. Yes, Carol Danvers is lame. However, she's paired with two other actresses who are having a good time, especially Kamala Khan from Miss Marvel. One of the Disney Plus shows that I couldn't even get through because it was padded out to all hell, but I really liked the actress. Actress Aiman Vellani is having a ball in this film. I love the family in this movie. They really bring everything up a notch. It reminded me of Shia's character, Sam Witwicky, in the Transformers movies. I always liked when he's playing off of his parents who are super fun and over-the-top and cringy. That stuff works really well. I'm not looking for Shakespeare in the Park with the Transformers movie. I'm certainly not expecting it from The Marvels, a film that on its face is presenting itself as a fun, goofy little film and a sci-fi action adventure for the whole family. It boggles my mind that people would be looking at this movie or going to it thinking, yeah, we're going to get another winter soldier out of this or Infinity War or something gritty or something serious or dark or that shit's done. The MCU has walked away from that or they're just mixing and matching, which is a big problem when you're trying to build up a universe that has a collection of different genres and different flavors, yet they're all very intimately tied together because there's going to be people that really like the Winter Soldiers or the Civil Wars, but they can't stand the She-Hawks or they don't want to watch the Moon Knights or the Loki's or all the other crap that's all over the place, yet it's almost mandatory to get full satisfaction out of these films and TV shows and that's just too much homework for people. Like I said, The Marvels has a lot of baggage. It's also not going to be making a billion dollars because it's no longer wedged between the showstoppers. Now it's in like phase four, phase five of the MCU after several disappointing audience, Ant-Man and the Wasp, Quantum Shitia comes to mind. I couldn't stand that movie. It was bloated over long. The tone was all over the place. The characters didn't really work together and here everything is pretty much opposite. Short runtime, to the point, lots of action, lots of comedy. There's some decent drama. Some of it were, I think most of it works honestly. Unfortunately, it pairs off of Captain Marvel, so you do kind of have to understand that movie a little bit going in. However, it does attempt to give you quick flashbacks, catch you up and it does a decent job of it, I think. Again, my kids didn't go, my wife didn't go, but I am actually excited to watch this movie with them, whether we see it in theaters or when it comes to Disney Plus eventually, because I think they're all going to have a good time with it. And I guess that's ultimately where I stand with my review. I went in with a big chip on my shoulder. I thought the trailers looked like hot trash. I don't like the first Captain Marvel movie. I think the character sucks, but I think the whole power switching storyline, bringing these characters together, giving Brie a little bit more room to actually flex some range with her emotions and with her acting has helped immensely. Is it this brilliant, perfect movie? No, I said it reminds me of one of those 90s films, like A Rookie of the Year or a, it's not near as good as like a Sandlot, but it just has a fun vibe to it. And I was, I was feeling like a kid again watching it. So, you know, it doesn't always have to be doom and gloom, larger than life spectacle. I like a lot of family movies.  You throw me an illumination movie like Mario or even the Despicable Me franchise. I'm going to have a good time. It's all about expectation. Movies got a pretty sweet score, pretty solid special effects. There's some janky stuff. There's a lot of it. Some practical effects, which I wasn't expecting at this point in the MCU. They even went out of their way at one point and had Samuel L. Jackson's Nick Fury lean on something. And I was like, oh yeah. Almost like the director was saying, look, there's, there's a wall here that we built. There is a set somewhere in this pile of CG. As I stated, a lot of humor. It doesn't go the route of Thor Love and Thunder for me though where everything is just undercut and they're constantly goofing around. The green screen is not atrocious like it is there. It does respect the audience enough to make a plot that, oh, I, you know what, that reminds me of the villain. Let me, let me end with another negative. The villain in this is just terrible, but it's almost, it's almost like intentionally schlocky and bad on purpose. Again, it reminds me of a 90s movie.  She's using this weird accent. She's doing a lot of facial tics and bizarre behavior. And I kind of dug how bad she was. It was almost on purpose to make her so bad. There are a couple scenes that didn't quite land for me, but I appreciate them trying new things. And yeah, I guess overall, a hot mess, but in a good way. A good hot mess. At least for me. Again, I would not run out and go see this if you're like, I need a movie that brings me back into the MCU.  All right, let me know if you saw this movie, if you plan on seeing it by putting a comment below. Please think about liking the video and subscribing if you haven't. I post tons of movie reviews, roasts, live streams, each and every week. I'm having a good time. I hope you join me and we can have a good time together. That sounded weird. Sound a little sexual, but I'm all right with it. I'm cool. All right, thanks for watching. Hopefully I see you next time. Take care.