How deeply does Azure Security cover vulnerability assessment?

Defines scanning and provider choices but stops short of detailing configuration, findings, or remediation procedures.

Vulnerability assessment

A vulnerability assessment is a systematic examination of systems and installed software to identify security weaknesses.

A vulnerability assessment systematically scans servers and installed applications for security weaknesses. In Microsoft Defender for Servers, continuous scanning helps identify vulnerabilities before they become exploitable security issues. section 7.2.1

The capability provides:

A scanner that performs a series of security checks on servers. section 7.2.1
A choice between Qualys and Microsoft's threat and vulnerability assessment solution. section 7.2.1
Continuous examination of installed applications to find vulnerabilities. section 7.2.1

Table 7.1 Comparison of Defender for Servers plans (view table figure)

Defender for Servers plan 1	Defender for Servers plan 2
Microsoft Defender for Endpoint Microsoft Defender Vulnerability Management Auto-provisioning	Microsoft Defender for Endpoint Microsoft Defender Vulnerability Management Auto-provisioning Agentless vulnerability scanning for machines Just-in-time VM access for machine ports Adaptive application control File integrity monitoring Adaptive network hardening Network layer threat detections Integrated vulnerability assessment powered by Qualys Log Analytics 500 MB free data ingestion

Defender for Servers plan 1

Defender for Servers plan 2

Microsoft Defender for Endpoint

Microsoft Defender Vulnerability Management

Auto-provisioning

Microsoft Defender for Endpoint

Microsoft Defender Vulnerability Management

Auto-provisioning

Agentless vulnerability scanning for machines

Just-in-time VM access for machine ports

Adaptive application control

File integrity monitoring

Adaptive network hardening

Network layer threat detections

Integrated vulnerability assessment powered by Qualys

Log Analytics 500 MB free data ingestion

Compare Defender for Servers plans to see which tiers include integrated vulnerability assessment powered by Qualys and other server-protection capabilities. section 7.2.1

How Azure Security covers it

liveBook manning.com

Read Azure Security on liveBook Get the book at manning.com

Related concepts

penetration testingcontrasts with · Penetration testing is an authorized security assessment that simulates attacks against systems to identify and attempt to exploit security weaknesses.
vulnerability scanninghas part · Vulnerability scanning is the automated or systematic examination of software, systems, or configurations to identify known security weaknesses.
Wazuhimplemented by · Wazuh is an open-source security platform for threat detection, file-integrity monitoring, vulnerability detection, and compliance analysis.
security assessmentkind of · A security assessment is a systematic evaluation of a system’s threats, vulnerabilities, controls, risks, and potential consequences.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.