1,449 questions with Microsoft Defender for Cloud-related tags

Sort by: Updated
Updated Created Answers
0 answers

Defender for Cloud updated CIS Compliance Standard

I would like to ask if the Defender for Cloud product group knows when the updated CIS Azure Foundations Benchmark will become available as a regulatory compliance standard in Defender for Cloud.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-23T23:05:21.8+00:00
Josue Gonzalez 90 Reputation points
commented 2024-12-31T16:29:18.2933333+00:00
Josue Gonzalez 90 Reputation points
1 answer

Mismatch API Version with Azure Resource Graph

I am trying to find the full schema for the microsoft.security/assessments/subassessments. Azure Resource Graph is telling me that the resource is using version 2020-01-01 of the API. There is no corresponding version or release notes of that API. Here…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-23T21:15:42.52+00:00
Ben Bernays 0 Reputation points
commented 2024-12-31T13:52:19.5433333+00:00
Ben Bernays 0 Reputation points
1 answer

Is it possible to automatically email reports for incomplete Attack Simulator training?

Hey everyone, I’m currently managing security training for my organization and using the Attack Simulator feature in Microsoft 365. I was wondering: Is there a way to automate reports for users who haven’t completed their assigned training and have those…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-11T14:43:26.54+00:00
Daniel Ideho 0 Reputation points
commented 2024-12-31T07:59:33.17+00:00
Daniel Ideho 0 Reputation points
0 answers

AxiosError: Request failed with status code 400

Hi, When we are trying to raise our secure score we encountered this problem: Something went wrong We have encountered an error loading this page, please try again later: AxiosError: Request failed with status code 400 Can someone explain why its having…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,877 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
230 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
159 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
19 questions
asked 2024-12-16T22:13:47.3766667+00:00
Lyle 80 Reputation points
commented 2024-12-30T22:14:32.4666667+00:00
Sebastian Colakidis 0 Reputation points
1 answer One of the answers was accepted by the question author.

Identity Secure Score Regression without making any changes

Hello, Our Identity Secure Score in Entra ID has dropped from 79.98% to 50.36% without any changes made on our part. Using Microsoft Defender, we can view the Microsoft Secure Score, which is different from the Entra Identity Secure Score. However, we…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,674 questions
asked 2024-10-18T12:46:11.64+00:00
LM-5132 155 Reputation points
commented 2024-12-30T11:13:46.21+00:00
Ashutosh Gairola 0 Reputation points
1 answer

MDE - Devices are displayed in the exposed devices even though the recommendations have been enforced

Hi all, We have problems with the Microsoft Defender vulnerability management. E.g. with the recommendation “Set ‘Maximum password age’ to ‘60 or fewer days, but not 0’”. We have set this setting via GPO and deployed it to the clients/servers. This was…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-02T16:31:44.05+00:00
Lars Wegner 0 Reputation points
answered 2024-12-30T07:21:30.9866667+00:00
Prathista Ilango 170 Reputation points Microsoft Employee
1 answer

Policy definition "Windows machines should be configured to use secure communication protocols" is being wrongly applied to Windows11 machines.

I have some windows 11 machines and they are being flagged by Microsoft Defender for Cloud saying "Windows machines should be configured to use secure communication protocols". But when I research this issue I found out that Windows 11 has…

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,304 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-24T23:07:59.2766667+00:00
Chris Lovett 35 Reputation points Microsoft Employee
commented 2024-12-27T04:35:58.0366667+00:00
Givary-MSFT 34,526 Reputation points Microsoft Employee
0 answers

Error message when try to get my secure score

Every time I try to get my secure score the following message appears. I could previously access it and now I can only see the score on the dashboard (which has dropped significantly) from the previous score.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-18T03:34:03.46+00:00
Aaron Lake 0 Reputation points
commented 2024-12-26T02:41:00.5366667+00:00
Raja Pothuraju 10,195 Reputation points Microsoft Vendor
1 answer

Simulation phishing Training - Defender Menu

Hi, We are trying to explore the attack simulation, when a user is compromised and they are enrolled for training, it is noticed that the MS defender Menu (Home, Threat Intelligence - Trials, Exposure Management - Data Connectors, Email Collaboration -…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-05T15:47:09.4+00:00
RM_77 0 Reputation points
edited the question 2024-12-26T02:05:34.8866667+00:00
Raja Pothuraju 10,195 Reputation points Microsoft Vendor
0 answers

Microsoft XDR (Defender) - DeviceEvents - ShellLinkCreateFileEvent

Hi everyone, I've been trying to create a hunting query in the Defender portal to identify when a malicious .lnk file is created. I noticed that an interesting event to detect and analyze this is "DeviceEvents --> ShellLinkCreateFileEvent",…

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,966 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,877 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-19T18:02:05.2466667+00:00
viri4to 10 Reputation points
commented 2024-12-24T19:32:43.0133333+00:00
Navya 14,040 Reputation points Microsoft Vendor
1 answer

i want to control and limited the Microsoft Defender action inroder to reduce costs

i have significant costs on Microsoft Defender for Cloud- I would like to reduce that . I want to know how can I reduce my costs , how to limit the Microsoft Defender for Cloud. when i checked the settings of defnder plans i have seen that there shold be…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-15T18:33:46.4466667+00:00
Amir Shiloh 0 Reputation points
edited the question 2024-12-24T17:07:03.4466667+00:00
SadiqhAhmed-MSFT 47,926 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Use quarantine notifications

How can I customize the quarantine email template in Microsoft 365 Defender to translate the email body into Azerbaijani without using PowerShell? I want to ensure the subject line, body text, and all relevant sections are user-friendly for…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-19T12:27:39.42+00:00
Tofig Kishiyev 20 Reputation points
accepted 2024-12-24T05:17:45.3666667+00:00
Tofig Kishiyev 20 Reputation points
1 answer

Security compliance for azure resources

Hi My customer wants me to check security breaches in his Azure tenant. He has one subscription and many resource groups. Many resources are inside the resource group. How to start and what things should I check? For example; if I will start with…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-18T01:01:13.4566667+00:00
HASSAN BIN NASIR DAR 351 Reputation points
commented 2024-12-23T19:31:53.85+00:00
Navya 14,040 Reputation points Microsoft Vendor
1 answer

Defender for Storage plan where it store the logs

When we are enabling Defender for Storage plan or other plan -where its store the logs. we can check the alerts, but to get the alert, defender must be checking some logs, so that logs where it store ? and how to check it ?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-18T05:37:42.1533333+00:00
Naresh Badgujar 0 Reputation points
commented 2024-12-23T06:47:11.78+00:00
Givary-MSFT 34,526 Reputation points Microsoft Employee
0 answers

Microsoft Defender Email Collaboration

I want to customize quaratine notification. When user recieve malicous mail ( for example it will be phishing link , malicous attachment, spam mail and etc) , it will go quarantine due policies. Quarantine also sends notification to user, as quarantine…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
230 questions
asked 2024-12-20T10:46:32.79+00:00
Kanan Ganiyev 0 Reputation points
commented 2024-12-23T06:19:35.6166667+00:00
Kanan Ganiyev 0 Reputation points
3 answers

Microsoft Defender For Cloud Not Giving Any Security Alert?

I have enabled MicroSoft Defender for Cloud for my Ubuntu Servers and Azure Mysql Server. I have enabled it a week ago, but it didn't send any security alert. I am wondering if there is any other configuration that i need to do before receiving any…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,184 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-16T09:30:30.8866667+00:00
Rehan Ch 0 Reputation points
edited an answer 2024-12-20T13:05:21.7366667+00:00
alta94 2,191 Reputation points
1 answer

OpenSSL vulnerabilities in Defender for latest version Microsoft Products

My org has several OpenSSL vulnerabilities for OneDrive and Azure Disk Encryption. The CVEs are CVE-2024-4603, CVE-2024-4741, CVE-2024-5535, and Defender was said to fix inaccuracies with these last month (Sept. 2024).…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-10-15T20:07:36.4466667+00:00
Zach Hyman 100 Reputation points
commented 2024-12-20T11:08:19.1666667+00:00
Ronald Dolfsma 0 Reputation points
1 answer

OpenSSL Vulnerability Shown on Microsoft Defender for Cloud Dashboard - OneDrive affected app

An OpenSSL vulnerability has been flagged on one of our devices by Microsoft Defender for Cloud. The vulnerability has listed two dll files as the main culprits (both installed via OneDrive): libcrypto-3-x64.dll libssl-3-x64.dll The OneDrive version…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-10-31T12:38:50.5166667+00:00
Eric Wasike 50 Reputation points
commented 2024-12-19T17:45:49.0266667+00:00
Zachery Paul Gardner 0 Reputation points
0 answers

how to export scan data and xml report of an asset that has been detected for being vulnerable by MS Defender xdr

Hello ☺️ I am trying to figure out how to generate scan data and XML report of an asset that has been detected for vulnerability for a specific CVE on defender XDR. I am trying to provide this information to the Rapid7 team as the vulnerability report…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
230 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
159 questions
asked 2024-12-12T12:45:53.3766667+00:00
Saborni Barua 0 Reputation points
edited the question 2024-12-18T06:31:47.4266667+00:00
RNareddy 1,505 Reputation points Microsoft Vendor
0 answers

Defender for Storage scan single blob...

Hi, We've enabled Defender for Storage Accounts on an account which receives blobs from third-parties. If the blob is marked as safe - we continue onward processing. We're in a scenario where not all uploaded blobs are marked as safe/unsafe by Defender.…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
asked 2024-12-13T14:19:46.41+00:00
Matt 0 Reputation points
commented 2024-12-17T05:53:24.65+00:00
Givary-MSFT 34,526 Reputation points Microsoft Employee