News

Project VAST Security Tool Now Rolling Out to Microsoft Premier Customers

Microsoft's Project VAST is now a supported product that's offered to Microsoft Premier customers, Microsoft announced last week.

Project VAST, or "Visual Auditing Security Tool," combines the capabilities of Azure Log Analytics with Power BI to create data visualizations regarding the state of an organization's security. It was first unveiled back in March.

The security status of an organization is surfaced using tabs that are built into the Project VAST interface. The idea is to take away the drudgery of having to comb through log files and store data for analysis using a security information and event management (SIEM) system.

According to an Aug. 30 Microsoft announcement, Project VAST currently addresses the following scenarios:

  • Insecure LDAP [Lightweight Directory Access Protocol] (unsigned, unencrypted) calls going against the domain controllers. Quickly identify the source and destination of the traffic.
  • Deprecated protocol and cipher usage (NTLM, wDigest, DES, RC4, SMB1, etc.) in the environment. Rich visual display represents verbose logging information.
  • All logons and authentications going against domain controllers in the environment. At a glance, understand which accounts authenticate to which computers and whether the logons are safe or insecure. Measure compliance with security best practices to lower the risk of credential theft. Understand the use of the service accounts.
  • Measure the deployment and effectiveness of tools like the Local Administrator Password Solution (LAPS) and audit its usage in the environment.
  • Monitor the organization's compliance with security best practices, such as the Microsoft Security Privilege Access (SPA) roadmap (https://aka.ms/privsec)

Apparently, Project VAST is only offered to customers of Microsoft Premier, a technical support services program offered to organizations. Project VAST is described as being part of a Microsoft Onboarding Accelerator program. To set it up, Project VAST requires four days of on-site support from a Microsoft Premier field engineer, along with one day of remote support.

Microsoft currently offers Project VAST in the Europe, Middle East and Africa regions. It'll come next to "the Americas and the Asia-Pacific regions."

In other security news, the Microsoft Security Response Center has published its very first public documentation of its "security servicing criteria for Windows," according to an announcement. It defines Microsoft's thinking on how it responds to Windows security vulnerabilities that may get discovered by Microsoft or by security researchers.

About the Author

Kurt Mackie is senior news producer for the 1105 Enterprise Computing Group.

Featured

  • Microsoft Resumes Rerelease of Windows 10 Version 1809

    Microsoft on Wednesday once more resumed its general rollout of the Windows 10 version 1809 upgrade, also known as the "October 2018 Update."

  • Microsoft Ups Its Windows 10 App Compatibility Assurances

    Microsoft gave assurances this week that organizations adopting Windows 10 likely won't face application compatibility issues.

  • SharePoint Online Users To Get 'Modern' UI Push in April

    Microsoft plans to alter some of the tenant-level blocking capabilities that may have been set up by organizations and deliver its so-called "modern" user interface (UI) to Lists and Libraries for SharePoint Online users, starting in April.

  • How To Use PowerShell Splatting

    Despite its weird name, splatting can be a really handy technique if you create a lot of PowerShell scripts.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.