Azure-Network-Security

(★ 937)

Resources for improving Customer Experience with Azure Network Security

File Explorer

Download Latest Version (.zip)

- detectionsValidations.yaml
- documentsLinkValidator.yaml
- jsonFileValidator.yaml
- kqlValidations.yaml
- workbooksValidations.yaml
- yamlFileValidator.yaml
- - bug_report.md
  - feature_request.md
- - codeql-analysis.yml
  - codeql.yml
  - devskim.yml
  - greetings.yml
  - super-linter.yml
  - trafficcounter.yml
- dependabot.yml
- - changedFilesValidator.ts
  - exitCode.ts
  - gitWrapper.ts
  - logger.ts
  - stringExtenssions.ts
- jsonFileValidator.ts
- ReadMe.md
- yamlFileValidator.ts
- launch.json
- settings.json
- README.md
- - DDoSMitigationStarted.json
  - README.md
- - Enrich-DDoSAlert.json
  - README.md
- - Prerequisites.sh
  - README.md
  - syn-flood.py
- - Check-DDoSProtection.ps1
  - README.md
- - README.md
- - Queries for DDoS Mitigation Trend
  - README.md
- - Get-AllDdosProtectedIPs.ps1
  - README.md
- - DDoS Plan Link PS Script.ps1
  - Readme.md
- - Get-AzDDOSProtectedIPs.ps1
  - README.md
- - AzureDDoSWorkbook_ARM.json
  - AzureDDoSWorkbookV2_ARM.json
  - GalleryTemplate.json
  - GalleryTemplateV2.json
  - README.md
- README.md
- - README.md
- - backup-azfw-template-v3.json
  - Deploy-FWBackup.ps1
  - README.md
- - Playbook - Add to IP Group with REST API.json
  - README.md
- - Detection - Analytic rule query for Cl0p.json
  - Detection - Analytic rule query for Coinminer.json
  - Detection - Analytic rule query for Sunburst.json
  - README.md
- - README.md
- - README.MD
  - Runbook.txt
- - ipsconfig.json
  - ipssigs.ps1
  - ipssigupdate.ps1
  - README.md
- - azure-firewall-ipgroup.auto.tfvars.sample
  - main.tf
  - vars.tf
- - chkp2azfw.py
  - index.json
  - Network-Management server.json
  - README.md
  - Standard_objects.json
  - template.json
- - read_fortigate_config.py
  - readme.md
- - pa2azfw.py
  - readme.md
- - MigrateSecureHub.md
  - README.md
- - AzFW-AKS-sync.png
  - README.md
  - UpdateFirewallPolicy.ps1
- - azuredeploy.json
  - azuredeploy.parameters.json
  - metadata.json
  - README.md
- - FwBasicTFMain.tf
  - readme.md
- - DedicatedPeVnet.tf
  - HubAndSpoke.tf
  - readme.md
  - SingleVnet.tf
- - azuredeploy.json
  - o365_rules.py
  - readme.md
- - azuredeploy.json
  - readme.md
- - README.md
  - Template.json
- - azuredeploy.json
  - README.md
- - azuredeploy.json
  - README.md
- - PrivateIpDnatArmTemplateV2.json
  - readme.md
  - win-vm-2.ps1
  - win-vm-3.ps1
- - README.md
- - azuredeploy.json
  - README.MD
- - Azure Firewall_ARM.json
  - Azure Firewall_Gallery.json
  - Azure Firewall_ResourceSpecific_ARM.json
  - Azure Firewall_ResourceSpecific_Gallery.json
  - README.md
- - armTemplate.json
  - netsec.gif
  - ReadMe.md
- README.md
- - afd-rate-limit-1.png
  - afd-rate-limit-2.png
  - afd-rate-limit-3.png
  - afd-redirect-1.png
  - afd-redirect-2.png
  - afd-redirect-3.png
  - Azfw-east-west-1.jpg
  - Azfw-east-west-1.png
  - Azfw-east-west-2.png
  - Azfw-east-west-3.png
  - Azfw-latency-flow-logs-1.png
  - Azfw-latency-flow-logs-2.png
  - Azfw-latency-flow-logs-3.png
  - Azfw-latency-flow-logs-4.png
  - Azfw-latency-flow-logs-5.png
  - Azfw-outbound-internet-1.png
  - Azfw-outbound-internet-2.png
  - Azfw-outbound-internet-3.png
  - Azfw-resource-specific-logs-1.png
  - Azfw-resource-specific-logs-2.png
  - ddos-logs-metrics-1.png
  - ddos-logs-metrics-2.png
  - ddos-logs-metrics-3.png
  - ddos-logs-metrics-4.png
  - ddos-logs-metrics-5.png
  - ddos-logs-metrics-6.png
  - ddos-sentinel-1.png
  - ddos-sentinel-2.png
  - ddos-sentinel-3.png
  - ddos-sentinel-4.png
  - ddos-setup-1.png
  - ddos-setup-2.png
  - ddos-setup-3.png
  - ddos-setup-4.png
  - ddos-setup-5.png
  - ddos-setup-6.png
  - ddos-setup-7.png
  - ddos-setup-8.png
  - js-challenge-1.png
  - js-challenge-2.png
  - js-challenge-3.png
  - js-challenge-4.png
  - js-challenge-5.png
  - js-challenge-6.png
  - mozilla-user-agent-1.png
  - mozilla-user-agent-2.png
  - mozilla-user-agent-3.png
  - ninja-cat-logo-1.png
  - ninja-cat-logo-2.png
  - README.md
  - sql-injection-1.png
  - sql-injection-2.png
  - sql-injection-3.png
  - sql-injection-4.png
  - sql-injection-5.png
  - sql-injection-6.png
  - sql-injection-7.png
  - waf-diag-metrics-1.png
  - waf-diag-metrics-2.png
- - labdeployment.json
  - Resource.md
- Azure Application Gateway WAF.md
- Azure DDoS Protection.md
- Azure Firewall.md
- Azure Front Door WAF.md
- README.md
- - AlertBody.cs
  - LogsBody.cs
  - ProcessAFDAlerts.cs
  - README.md
- - CustomRulesAFD.json
  - CustomRulesAppGW.json
  - README.md
- - AFD-WAF-Detection Based on Captcha Bot Traffic Thresholds.kql
  - Application Gateway WAF Detection for Protocol Attacks [HTTP] - Azure Diagnostics.json
  - Azure Front Door WAF Detection for Protocol Attacks [HTTP] - Azure Diagnostics.json
  - Code-Injection-AFD-WAF.json
  - Code-Injection-AppGW-WAF-CRS3-2.json
  - Detection-based-on-JSChallenge-for-Bot-Traffic-Thresholds.json
  - Hunting Queries for Top IPs and Rule IDs for Azure WAF
  - Malicious-Bots-Detection-Query
  - Path-Traversal-AFD-WAF.json
  - Path-Traversal-AppGW-CRS3-2.json
  - Readme.md
  - Resource Specific - App GW WAF Malicious WAF Session.csl
  - Resource Specific - AppGW WAF Scanner Detections.csl
  - Resource Specific Application Gateway WAF - Malicious-Bots-Detection-Query.csl
  - Resource-Specific - Application Gateway WAF Detection for Protocol Attacks [HTTP].json
  - Resource-Specific-Code-Injection-AppGW-WAF-DRS.csl
  - Resource-Specific-Path-Traversal-AppGW-DRS.csl
  - Resource-Specific-SQLi-Detection-APPGW-WAF.csl
  - Resource-Specific-XSS-Detection-AppGW-WAF.csl
  - Scanner-Detections-AppGw.json
  - SQLi-Detection-APPGW-WAF.json
  - Time Series IP Anomaly Detection for Azure Application Gateway WAF Resource Specific Logs.csl
  - Time Series IP Anomaly Detection for Azure WAF.json
  - XSS-Detection-AppGW-WAF.json
- - README.md
  - template.json
- - README.md
  - template.json
  - templateV2.json
- - README.md
- - ReadMe.md
- - generate_waf_exclusion.py
  - README.MD
- - azuredeploy.json
  - README.md
- - README.md
  - WAF Quickstart Template v2.json
- - azure-firewall-ipgroup.auto.tfvars.sample
  - main.tf
  - outputs.tf
  - providers.tf
  - Readme.md
  - variables.tf
- - AzNetSecdeploy_Juice-Shop_AZFW-Rules_Updated.json
  - README.md
- - azuredeploy.json
  - README.md
- - AFDTriageGalleryTemplate.json
  - AFDTriageworkbookARMTemplate.json
  - README.md
- - AGC WAF Triage Workbook.json
  - README.md
- - Azure APP GW WAF Monitor Workbook - Resource Specific - Gallery.json
  - Azure App GW WAF Monitor Workbook - Resource Specific Logs - ARM.json
  - README.md
- - README.md
  - WAFTriageWorkbook_ARM.json
- - README.md
  - WAFWorkbook_ARM.json
  - WAFWorkbook_Gallery.json
  - WAFWorkbookV2_WithMetrics_ARM.json
  - WAFWorkbookV2_WithMetrics_Gallery.json
  - WAFWorkbookV3_WithJSChallenge_ARM.json
  - WAFWorkbookV3_WithJSChallenge_Gallery.json
- README.MD
- - Get-AzDNSUnhealthyRecords.ps1
- - readme.md
- - Readme.md
- - Get-AzDNSDanglingNsRecords.ps1
- - Netsec crossproduct source IP query
  - README.md
- - assignIpTags.ps1
- README.md
- - README.md
- - AzNetSecdeploy.json
  - network-security.template.yml
  - network-security.variables.yml
  - README.md
- - AzNetSecdeploy.json
  - README.md
- - AzNetSecdeploy_Juice-Shop_AZFW-Rules_Updated.json
  - README.md
- readme.md
- readme
.gitignore
azure-pipelines.yml
CODE_OF_CONDUCT.md
CODEOWNERS
CONTRIBUTING.md
LICENSE
package-lock.json
package.json
README.md
SECURITY.md
tsconfig.json

# Installation Guide

1. Get the code

git clone https://github.com/Azure/Azure-Network-Security

Downloads the entire project code from GitHub to your computer.

cd Azure-Network-Security

Moves into the project folder you just downloaded.

2. Node.js

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Node.js Node.js must be installed to use npm. The LTS version is recommended.

npm install

Downloads and installs the libraries listed in package.json.

npm start

Starts the development/run server.

✅ After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.

3. PHP (Composer)

Easy

Prerequisites

Git Needed to download the project code from GitHub.
PHP A PHP runtime is required.
Composer The package manager used to install PHP libraries.

⚠️ This is a large repository, so this method may point to an internal sub-package rather than the actual core product. Check the full README as well.

cd Lab Templates/Lab Template - WAF for GCP Coffeeshop/sql-injection-demo

This project's files live in a subfolder, so move into it first.

composer install

Installs the PHP libraries listed in composer.json.

✅ Run it with a built-in server like php -S localhost:8000, then open http://localhost:8000 in your browser.