Cloud resources can be well configured today and vulnerable tomorrow. Microsoft Defender for Cloud helps you keep watch: it monitors Azure resources, detects threats, and recommends ways to improve their security. It is an Azure-native service, so there is no separate deployment to install before finding it in the Azure Portal. section 6.4
Three views turn that watchfulness into work:
- Secure Score indicates the environment’s security posture and helps prioritize improvements. section 6.4 section 6.9
- Security recommendations act as a to-do list for improving particular services. section 6.9
- Security alerts flag detected threats. Inspect an alert’s description and severity before deciding what to address first; the value of the affected resource also matters. section 6.4.3
A website with more than one weak point
Suppose a company runs a website, file server, and database in Azure. Defender for Cloud can monitor services such as Azure App Service and Azure SQL Database, as well as network exposure such as access to VM ports. If an alert identifies a vulnerable WordPress theme that could allow code execution, replacing it with a trusted theme is a practical next step. section 6.4 section 6.4.3
Search for Microsoft Defender for Cloud in the Azure Portal to open its overview. Threat-detection alerts are paid, but you can generate sample alerts for free to practice reviewing their severity and details. Weigh paid alerts particularly for resources that are both vulnerable and critical to business processes. section 6.4 section 6.4.3
