Microsoft Defender for Cloud Cheat Sheet

• Manages all the security features of Azure.
• Detect vulnerabilities, restrict your exposure to threats, and quickly detect and respond to attacks.
• Secure Score allows you to get continuous assessment and security recommendations.
• It helps you to detect unusual activities and prevent threats in your PaaS workloads.
• Protect your virtual machines with configuration and vulnerability management, workload hardening, and server EDR.
• It also supports advanced monitoring to track and manage compliance & governance.

• Allows you to protect your resources using free or standard tiers.

Concepts

• Defender for Cloud displays the overall secure score of your account. The higher the score, the lower the identified risk level.
• Recommendations help you remediate potential security vulnerabilities in your Azure resources.
• Security controls help you implement a set of security recommendations. After you remediate all of the recommendations, it will reflect in your overall security score.
• To help in complying with the security requirement of your organization, you can define a security policy in your workloads.
• You can quickly investigate the problem and recommendations on how to remediate an attack using security alerts.
• Microsoft Defender for Cloud just-in-time (JIT) enables you to lock down inbound traffic to your Azure virtual machines.

Microsoft Defender for Cloud Pricing

• With Standard Tier, you are charged
  • Per hour for VMs, app services, SQL database
  • Per transactions for storage and IoT messages
  • Per month for IoT devices
  • Per image for ACR
  • Per vCore/hour for AKS

Microsoft Defender for Cloud vs Microsoft Sentinel:
https://tutorialsdojo.com/azure-security-center-vs-azure-sentinel/

Azure Security Expert Series:
https://www.youtube.com/watch?v=vxv4NyBs-80&list=PLLasX02E8BPA0ZNzg-BsHio7yTciN-UVu

Microsoft Defender for Cloud Cheat Sheet References:

https://azure.microsoft.com/en-us/services/defender-for-cloud/
https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction