Microsoft Safety Scanner

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

this one is different from the microsoft security scanner

By default, storage analytics retention is set to 0 day

By default, storage analytics retention is set to zero (0) days. This means storage metrics and logs are kept indefinitely and you are responsible for cleaning up the storage.

- source MS

azure backup vault

choose a region close to the production server, so uploads are faster

Azure backups

A passphrase is used to encrypt and decrypt files.

Disk space for caching files is required.

Azure encrypts and decrypts your backup files.

Get-AzureStorageQueue will display the approximate number of messages in a storage queue associated with an Azure Storage account

Get-AzureStorageQueue will display the approximate number of messages in a storage queue associated with an Azure Storage account

Azure Blob block storage is the most cost effective storage. Data is written in blocks and optimized for sequention I/O.

Blob block storage is the most cost effective storage. Data is written in blocks and optimized for sequention I/O.

Read-access redundant storage (RA-GRS) -- default azure replications scheme

Read-access redundant storage (RA-GRS) -- default azure replications scheme

Smart card logon

Smart cards can be used to log on only to domain accounts, not local accounts. Smart card authentication requires the use of the Kerberos authentication protocol. In Windows-based operating systems a public key extension to the Kerberos protocol's initial authentication request is used. In contrast to shared secret key cryptography, public key cryptography is asymmetric, that is, two different keys are needed, one to encrypt, another to decrypt. Together, the keys that are required to perform both operations make up a private/public key pair.

- source Microsoft

Azure AD is different from AD DS

Although Azure AD has many similarities to AD DS, there are also many differences. It is important to realize that using Azure AD is different from deploying an Active Directory domain controller on an Azure virtual machine and adding it to your on-premises domain. Here are some characteristics of Azure AD that make it different.

• Identity solution. Azure AD is primarily an identity solution, and it is designed for Internet-based applications by using HTTP and HTTPS communications.
• REST API Querying. Because Azure AD is HTTP/HTTPS based, it cannot be queried through LDAP. Instead, Azure AD uses the REST API over HTTP and HTTPS.
• Communication Protocols. Because Azure AD is HTTP/HTTPS based, it does not use Kerberos authentication. Instead, it uses HTTP and HTTPS protocols such as SAML, WS-Federation, and OpenID Connect for authentication (and OAuth for authorization).
• Federation Services. Azure AD includes federation services, and many third-party services (such as Facebook).
• Flat structure. Azure AD users and groups are created in a flat structure, and there are no Organizational Units (OUs) or Group Policy Objects (GPOs).
• source Microsoft
•