azure:az-500:security_operations_management

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
azure:az-500:security_operations_management [2022/06/28 16:02] – [Defender for Servers] mmuzeazure:az-500:security_operations_management [2022/07/23 00:37] (current) – [Microsoft Defender for Cloud] mmuze
Line 66: Line 66:
   * The free tier does not include monitoring non-Azure resources; this requires the Enhance tier of the service.   * The free tier does not include monitoring non-Azure resources; this requires the Enhance tier of the service.
   * **Example:** Defender would not detect if there is a new version of an OS, but it would detect of there are critical security updates that are missing.   * **Example:** Defender would not detect if there is a new version of an OS, but it would detect of there are critical security updates that are missing.
 +  * **Azure Policy** provides most of the data Defender for Cloud uses 
 +  * A **Log Analytics Workspace** is used just for data coming from virtual machines
 ===== Defender for Servers ===== ===== Defender for Servers =====
 > Microsoft Defender for Servers is one of the enhanced security features of Microsoft Defender for Cloud. Use it to add threat detection and advanced defenses to your Windows and Linux machines whether they're running in Azure, AWS, GCP, and on-premises environment. > Microsoft Defender for Servers is one of the enhanced security features of Microsoft Defender for Cloud. Use it to add threat detection and advanced defenses to your Windows and Linux machines whether they're running in Azure, AWS, GCP, and on-premises environment.
Line 73: Line 74:
   * Alerts and vulnerability data from Microsoft Defender for Endpoint is shown in Microsoft Defender for Cloud   * Alerts and vulnerability data from Microsoft Defender for Endpoint is shown in Microsoft Defender for Cloud
   * There are two tiers Plan 1 and Plan 2.   * There are two tiers Plan 1 and Plan 2.
 +  * Defender for Servers also has features for just-in-time VM access, file integrity monitoring, ...
   * For just-in-time VM access, JIT does not support VMs protected by Azure Firewalls controlled by Azure Firewall Manager. The Azure Firewall must be configured with Rules (Classic) and cannot use Firewall policies.   * For just-in-time VM access, JIT does not support VMs protected by Azure Firewalls controlled by Azure Firewall Manager. The Azure Firewall must be configured with Rules (Classic) and cannot use Firewall policies.
 ====== Security Center ====== ====== Security Center ======
  • azure/az-500/security_operations_management.1656432148.txt.gz
  • Last modified: 2022/06/28 16:02
  • by mmuze