Azure Security Center

ASC is largely powered by Azure Policy

A Log Analytics Workspace is used to capture data from VMs for ASC findings specific to VMs.

There are two tiers of ASC—ASC with and without Defender. The tier without Defender is free and the tier with Defender is a paid service. Defender provides some additional capabilities. Defender for ASC can be enabled at a granular level for different resource types.