Operating system

As explained in Azure Security

An operating system is system software running inside a virtual machine that manages its virtual hardware and provides services for applications.

An operating system (OS) is the software layer beneath an application and above Azure compute resources such as virtual machines. OS data helps security teams detect suspicious activity as part of a defense-in-depth approach. section 9.1

Collecting OS data requires an agent. Azure provides the Azure Monitoring agent (AMA), which monitors Windows and Linux VMs and replaces the earlier Log Analytics, Microsoft Monitoring, and Operations Management Suite agents. section 9.1.4

Before installing AMA, verify the following:

• Assign suitable VM, connected-machine, and Log Analytics permissions. section 9.1.4
• Provide VM access to the required Azure Monitor and Log Analytics HTTPS endpoints. section 9.1.4
• Enable a user-assigned or system-assigned managed identity on each VM. section 9.1.4
• Use data collection rules when performance and security events must be sent to different Log Analytics workspaces. section 9.1.4

Install AMA on an Azure VM

Run Azure CLI with the AzureMonitorWindowsAgent extension, the Microsoft.Azure.Monitor publisher, the VM resource ID, automatic upgrades enabled, and managed-identity settings. Replace the placeholder resource identifiers with your environment's values. section 9.1.4

Figure 9.1 Understanding different log types in Azure

Use the layered diagram to relate application, OS, compute, container, Azure platform, subscription, and tenant log sources. section 9.1

How Azure Security covers it

How deep it goes

Explains OS log collection through agents, then details AMA prerequisites and installation, but defers data collection rules to section 9.4.

Examples

Uses Windows and Linux VMs, AMA installation through Azure CLI, managed identities, HTTPS endpoints, and multiple Log Analytics workspaces.

What it assumes

Assumes Azure VM access and introduces required permissions, endpoints, managed identities, agents, and workspace routing.

What you can do after

Operate/configure OS monitoring on Azure VMs by installing AMA and preparing permissions, networking, identity, and workspace routing.

How it connects

Connects operating-system monitoring with Azure Monitor, Azure VMs, Log Analytics, Microsoft Sentinel, Microsoft Defender for Cloud, and data collection rules.

liveBookmanning.com

Read Azure Security on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Learn Concurrent Programming with GoAn operating system is system software that manages computer hardware and provides services and abstractions for application programs.
• 

  liveBookmanning.com
  Grokking ConcurrencyAn operating system is system software that manages computer hardware resources and provides services for application programs.
• 

  liveBookmanning.com
  Microsoft Azure in ActionAn operating system is system software that manages computer hardware and provides services and execution facilities for applications.

Compare how 4 books explain operating system →

Related concepts

• Linuxincludes · Linux is an open-source operating-system kernel and the family of Unix-like operating systems built around it.
• applicationused by · An application is a software program or system that performs tasks or provides functionality for users or other software systems.
• Windowsincludes · Windows is Microsoft’s family of operating systems for personal computers, servers, and other computing devices.
• workflowuses · A workflow is an organized sequence of coordinated activities, tasks, or decisions through which work progresses toward an outcome.
• threaduses · A thread is an independently schedulable sequence or context of execution within a program or process.
• containerused by · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.