1,499 questions with Microsoft Defender for Cloud-related tags
Does the "Previously assigned" training completion status in Attack Simulator mean that the training has NOT been completed by the user?
I am using attack simulator to phish and assign training employees. I recently noticed a new status of completion of training following a click: "Previously assigned." Can you clarify what this Previously Assigned in the training completion…
Not able to load recommendations in Secure Score
Hello, In the recommended actions tab after selecting a recommendation, it does not open, instead keeps loading. Screenshot 2025-02-18 172535.png
Defender for Cloud - CSPM report
Hi All, Does Defender's Foundational CSPM or Defender CSPM generate Security assessment report document? Which should have current the security posture - Security score and recommendations. Thanks
Microsoft Defender for Cloud Security Alerts are still open while link in Defender XDR is already resolved
Our team observed that there are open or active alerts in Microsoft Defender for Cloud while its corresponding incident in Defender XDR is already resolved. We assume that it is the corresponding alert in Defender XDR since when we click the link in…
Unexpected Network Traffic Reaching VM Despite NSG Configuration in Azure
We are experiencing an issue where network traffic is reaching our Virtual Machine, even though our Network Security Group (NSG) is configured to block this traffic. For example, traffic on port 80 is being logged by UFW on the VM, despite the NSG rules…
Defender 50 GB GA
Hi All, I was going through the document on https://learn.microsoft.com/en-us/azure/defender-for-cloud/introduction-malware-scanning The document talks about "up to 50 GB in preview" Can I know when will be the GA for this…
Enable vulnerability scans for VMs
I need to enable vulnerability scans for my Azure VMs, but the MS Defender instruction do not seem to be up to date. I need support to get this setup as soon as possible.
Blocking a TLD in defender for endpoint
We have received a request to block an entire TLD in all workstation with Defender for Endpoint. I know you can add domains and block them to do that, but I dont know if this extends to full TLDs. BTW I tagged defender for cloud because i didnt see an…
How to add defender malware scanner for azure storage account
Im trying to enable malware scanner for my azure storage account but its throwing me this error. Plan enablement partially succeeded. Could not enable on-upload malware scanning: Exception of type 'Microsoft.Rest.Azure.CloudException' was thrown..…
Microsoft Defender for cloud
I'm trying to integrate defender CSPM advance , aws instance. I want to know is there any cost for data ingest from azure and egres from aws
Defender for Endpoint onboarding through Defender for Cloud integration on AVD
Hi, We have a subscription that is dedicated to Azure Virtual Desktop. In Defender for Cloud the Servers Plan 2 has been enabled. Now looking here…
OpenSSL Vulnerability
Hello, We received a critical alert from Microsoft Defender (CVE-2023-49210) which tells us that 90 of our devices have vulnerabilities due to the version Openssl which is not supported anymore. We don't have any software on these PCs that include…
How do I remediate the Secure Score recommendation to enable automatic updates in office now that admin templates are deprecated in intune?
This information is incorrect: Go to the Devices-> Configuration profiles To update an existing policy: Click on the policy name in the list In the navigation bar, click on Properties Next to Configuration settings click on Edit Go to step…

How can I avoid an exchange service to fall into a restricted entity in Microsoft 365
I have a Microsoft 365 basic account. I am using an email from my account to send notifications and documents as attachments from an app that is located on an EC2 Amazon AWS. The problem I have is that the email account keeps falling under restricted…
Approve remediation pending action failed Request failed with status code 403
Receiving this error message when trying to approve pending action in Microsoft Defender. Please advise.
Need IOC's
Hi MSTeam, Can i have IOC's for the vulnerability "CVE-2024-21413" to hunt.
DfC pre-scan possible (before pushing an image to a container)?
Is there a way to run a Defender for Containers like-scan before I push an image to a container? My team would like to verify that an image will pass DfC scans before pushing an image....
Azure Defender | Filter API by properties fields
Hi, I am trying to use this API to fetch detections: 'https://management.azure.com/subscriptions/<subscription_id>/providers/Microsoft.Security/alerts?api-version=2022-01-01&$filter=properties/startTimeUtc gt <datetime>' However, the…
Security and protection against ransomware/malware in Azure
We have VPN S2S connections from various locations. Plannign to deploy Azure Standard firewall. None of the VMs have public ips. We will be configuring azure sql managed instance with private endpoints and storage accounts with private links. Also will…
Identifying OS Patches and Updates by Severity in Azure
Hello, How can I identify operating system patches or available OS updates on both Linux and Windows Azure VMs based on severity within the Azure Portal, Azure Update Manager, or Microsoft Defender for Cloud ? In Azure Update Manager, updates are…