Monitoring and detecting runtime security risks and threats
All of the security tools that have been discussed up to this point have focused on preventing shipping vulnerable code to production environments. However, a complete, deployed software solution, including all its support infrastructure, is made out of so much more than just the code. On top of that, there are many interactions with a solution that may be unexpected or unplanned. Monitoring all of this continuously in production is necessary, not just to prevent security concerns but to also detect any security concerns that arise. In Azure, one of the tools available for doing just that is Azure Security Center. This and Azure Defender are now called Microsoft Defender for Cloud.
The Defender for Cloud tool provides security posture management and threat protection, and protects workloads running in Azure, hybrid, and other cloud platforms.
Defender for Cloud fills the following three needs as you manage...