Microsoft Defender for Cloud
Microsoft Defender for Cloud is a cloud security service that assesses security posture, detects threats, and provides security recommendations for cloud and hybrid workloads.
Azure Security
Microsoft Defender for Cloud is Microsoft's cloud security posture management and workload protection service for cloud and hybrid environments.
- How it is used
- Strengthens Azure security through posture assessment, recommendations, workload monitoring, alerts, and remediation tracking.
- How deep it goes
- Explains subscription onboarding, benchmark assignment, CSPM prioritization, and workload alerts without detailing every Defender plan configuration.
- Examples
- Uses exposed Kubeflow, crypto-mining nodes, RDP brute-force attempts, and key vault secrets without expiry dates.
- What you can do after
- Operate/configure it by onboarding subscriptions, assigning the security benchmark, reviewing recommendations, and forwarding alerts to Microsoft Sentinel.
Read how Azure Security explains Microsoft Defender for Cloud →
Microsoft Azure in Action
Microsoft Defender for Cloud is an Azure-native cloud security service that assesses security posture, detects threats, and provides security recommendations for cloud resources and workloads.
- How it is used
- Uses Defender for Cloud to assess Azure security posture, prioritize improvements, and investigate detected threats.
- How deep it goes
- Explains the score, recommendations, and alerts with a Portal workflow, but does not detail detection internals.
- Examples
- Uses a website, file server, database, sample alerts, and a vulnerable WordPress theme to make monitoring and response concrete.
- What you can do after
- Operate/configure it in the Azure Portal by locating its overview, reviewing recommendations, and practicing alert triage with free samples.
Read how Microsoft Azure in Action explains Microsoft Defender for Cloud →
Related concepts
- Microsoft Defender for Containersincludes · Microsoft Defender for Containers is Microsoft's cloud security service for detecting threats, assessing vulnerabilities, and enforcing security policies across containerized workloads and Kubernetes environments.
- Log Analytics agentuses · The Log Analytics agent is Microsoft's legacy host agent for collecting machine telemetry and sending it to a Log Analytics workspace.
- machine learninguses · Machine learning is a field of computational methods in which systems learn patterns or relationships from data to make predictions, decisions, or other outputs.
- Microsoft Defender for Serversincludes · Microsoft Defender for Servers is a Microsoft Defender for Cloud plan that provides security monitoring and workload protection for virtual machines and server workloads.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.