Workbook

As explained in Azure Security

An Azure Monitor workbook is an interactive report that combines data queries, visualizations, and text to present operational or security information.

An Azure Monitor workbook combines Defender for Cloud data with rich visualizations to make security monitoring practical. Available through the Azure portal and Microsoft Defender for Cloud dashboard, workbooks help teams operationalize security posture, alerts, vulnerabilities, compliance, and coverage. section 7.11 section 7.6

Built-in workbooks address focused security and operational questions:

• Secure Score Over Time tracks security posture and recommended resource changes. section 7.6.1
• Compliance Over Time follows alignment with selected regulatory standards. section 7.6.1
• Vulnerability Assessment Findings and Active Alerts summarize resource vulnerabilities and security alerts. section 7.6.1
• System Updates, Governance, Coverage, Ransomware Dashboard, Cost Estimation, and Containers Security target updates, rules, plan gaps, ransomware risk, pricing, and container security. section 7.6.1

Estimate Defender for Cloud plan costs

With at least Reader access on the relevant subscriptions, open the Microsoft Defender for Cloud dashboard in the Azure portal, select Workbooks, and open Cost Estimation. Choose subscriptions and Defender for Cloud plans, then optionally enable Additional Information. The workbook shows monthly estimates per subscription based on list prices; invoice totals may differ. section 7.6.2

Figure 7.10 A containers security workbook in the Microsoft Defender for Cloud dashboard

A containers security workbook brings together vulnerability scans, recommendations, security alerts, and MITRE ATT&CK tactics in one dashboard view. section 7.6.1

How Azure Security covers it

How deep it goes

Defines workbooks, lists built-in dashboards, and demonstrates cost estimation, but does not detail authoring or query construction.

Examples

Uses secure score, compliance, vulnerability, alert, update, governance, coverage, ransomware, cost, and container-security dashboards.

What it assumes

Assumes Azure access; cost estimation specifically requires at least Reader access on the selected subscriptions.

What you can do after

Operate/configure Cost Estimation to estimate monthly Defender for Cloud plan costs for selected subscriptions.

How it connects

Connects Defender for Cloud data with the Azure portal, continuous export, Log Analytics workspaces, and regulatory compliance standards.

liveBookmanning.com

Read Azure Security on liveBook Get the book at manning.com

Related concepts

• Microsoft Defender for Clouduses · Microsoft Defender for Cloud is a cloud security service that assesses security posture, detects threats, and provides security recommendations for cloud and hybrid workloads.
• Azure Monitorpart of · Azure Monitor is Microsoft's cloud observability service for collecting, analyzing, visualizing, and acting on telemetry from resources and applications.
• Content hubused by · Content hub is a Microsoft Sentinel content management feature for discovering and deploying security content such as data connectors, analytics rules, and playbooks.
• Azure Portalused by · Azure Portal is Microsoft's web-based management interface for creating, configuring, monitoring, and managing Azure resources and services.
• recommendationmeasures · A recommendation is a suggested item, choice, or course of action, based on available information, intended to guide a decision.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.