Lab — Azure
Pack Defender, Entra ID, and Sentinel cards — Azure literacy file from $CLOUD_LAB only.
Visual · t31_azure_lab
Lab: Azure pack. $CLOUD_LAB only. Original Cyberlium.
Azure pack merges Defender to Entra ID to Sentinel — paperwork before Docker module.
Lessons 5-1–5-3 named Defender recommendations, Entra ID hygiene, and Sentinel components. This lab merges three sections into one $CLOUD_LAB Azure artifact with M1 ethics cross-reference. No stranger subscription access — Azure literacy paperwork only. Next: Quiz — Azure Literacy.
1. Lab contract: Azure literacy pack
Create $HOME/cyberlium-lab/t31-m05-l04-azure-lab.txt merging Defender, Entra ID, and Sentinel sections with $CLOUD_LAB subscription ID and M1 ethics cross-reference.
Optional: note secure score range from sandbox read-only — no customer tenant refs.
Command guide
Try these commands — Lab contract: Azure literacy pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Azure CLI account — https://learn.microsoft.com/en-us/cli/azure/account Azure RBAC list — https://learn.microsoft.com/en-us/cli/azure/role/assignment Azure security — https://learn.microsoft.com/en-us/azure/security/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Install Azure CLI: https://learn.microsoft.com/cli/azure/install-azure-cli
macOS:
Command — copy this
brew install azure-cli
Windows: Install Azure CLI MSI
═══ LINUX / macOS ═══
Command — copy this
export CLOUD_LAB=${CLOUD_LAB:-$HOME/cyberlium-lab/t31-cloud}YOUR SUBSCRIPTION — verify context before review
Command — copy this
az account show 2>/dev/null || echo 'Run az login for YOUR subscription first'
az account list --query '[].{name:name,id:id,isDefault:isDefault}' -o table 2>/dev/null || echo 'YOUR subscription only'
cat > "$CLOUD_LAB/azure/azure-lab-findings.md" <<'EOF'
# Azure Lab Findings — YOUR SUBSCRIPTION
## Account context
- Paste az account show output (redact subscription ID if sharing)
## Review notes
- Defender Secure Score baseline?
- Conditional Access policies enabled?
- Overprivileged role assignments at subscription scope?
## Scope
- YOUR subscription only
EOFCommand — copy this
grep -E 'YOUR SUBSCRIPTION|Defender|Scope' "$CLOUD_LAB/azure/azure-lab-findings.md"
═══ WINDOWS ═══
YOUR SUBSCRIPTION — Azure lab
Command — copy this
az account show Get-Content $HOME/cyberlium-lab/t31-cloud/azure/entra-id-hygiene-checklist.md | Select-String MFA
Primary tools to practice this lesson: az, grep. Reference sites: Azure CLI account (https://learn.microsoft.com/en-us/cli/azure/account); Azure RBAC list (https://learn.microsoft.com/en-us/cli/azure/role/assignment); Azure security (https://learn.microsoft.com/en-us/azure/security/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check ethics
Grep for stranger subscription IDs, workspace keys, password spray references — remove. Pack labels all artifacts as $CLOUD_LAB training only.
Confirm identity section has no offensive auth attack steps.
3. Lock the proof
chmod 600 on the pack. Quiz next — then Docker Hygiene.
Azure literacy feeds container lessons in M6.
4. What you ship: Azure literacy pack for $CLOUD_LAB
Merged Defender, Entra ID, Sentinel sections. $CLOUD_LAB named. NO stranger subscriptions. chmod 600.
5. What you record before the next lesson
Date. Azure pack path. $CLOUD_LAB named. File t31-m05-l04-azure-lab.txt chmod 600.
6. Wrong vs right: stranger tenants vs YOUR cloud accounts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Include employer subscription ID in pack. Skip Entra ID section.
- Right: Write YOUR Azure literacy pack for $CLOUD_LAB. chmod 600. Next: Quiz — Azure Literacy.
Mission: freeze YOUR Azure literacy pack
1) Merge M5 literacy sections. 2) Confirm zero stranger refs. 3) Link M1 ethics cross-ref. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
One governed Azure pack beats ten stranger portal screenshots.
APPLY: This lab requires:
APPLY: True or False: Azure pack must label scenarios as $CLOUD_LAB training only.
APPLY: Entra ID section in pack feeds: