Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Microsoft Defender for Cloud Cookbook
  • Table Of Contents Toc
Microsoft Defender for Cloud Cookbook

Microsoft Defender for Cloud Cookbook

By : Sasha Kranjac
5 (4)
Buy this Book
close
close
Microsoft Defender for Cloud Cookbook

Microsoft Defender for Cloud Cookbook

5 (4)
By: Sasha Kranjac
Buy this Book

Overview of this book

Microsoft Defender for Cloud is a multi-cloud and hybrid cloud security posture management solution that enables security administrators to build cyber defense for their Azure and non-Azure resources by providing both recommendations and security protection capabilities. This book will start with a foundational overview of Microsoft Defender for Cloud and its core capabilities. Then, the reader is taken on a journey from enabling the service, selecting the correct tier, and configuring the data collection, to working on remediation. Next, we will continue with hands-on guidance on how to implement several security features of Microsoft Defender for Cloud, finishing with monitoring and maintenance-related topics, gaining visibility in advanced threat protection in distributed infrastructure and preventing security failures through automation. By the end of this book, you will know how to get a view of your security posture and where to optimize security protection in your environment as well as the ins and outs of Microsoft Defender for Cloud.
Table of Contents (12 chapters)
close
close
close
Preface
Icon
Preface
Icon
Who this book is for
Icon
What this book covers
Icon
To get the most out of this book
Icon
Download the color images
Icon
Conventions used
Icon
Get in touch
Icon
Reviews
Icon
Share Your Thoughts
1
Chapter 1: Getting Started with Microsoft Defender for Cloud
Icon
Chapter 1: Getting Started with Microsoft Defender for Cloud
Icon
Technical requirements
Icon
Enabling Microsoft Defender for Cloud Plans on Azure Subscriptions and Log Analytics Workspaces
Icon
Enabling an Microsoft Defender for Cloud Plans on an Azure Subscription
Icon
Enabling an Microsoft Defender for Cloud Plans on a Log Analytics Workspace
Icon
Enabling an Microsoft Defender for Cloud Plans on multiple Azure Subscriptions and Log Analytics Workspaces
Icon
Configuring data collection in a Log Analytics Workspace
Icon
Configuring provisioning extensions automatically
Icon
Enabling a Log Analytics agent for Azure VMs manually in the Log Analytics Workspace settings
Icon
Enabling a Log Analytics agent for Azure VMs manually in the Virtual Machine settings
Icon
Configuring a Log Analytics agent for Azure VMs extension deployment
Icon
Configuring email notifications
Icon
Assigning Microsoft Defender for Cloud permissions
Icon
Onboarding Microsoft Defender for Cloud using PowerShell
Icon
Enabling Microsoft Defender for Cloud integration with other Microsoft security services
Lock Free Chapter
2
Chapter 2: Multi-Cloud Connectivity
chevron up
Icon
Chapter 2: Multi-Cloud Connectivity
Icon
Technical requirements
Icon
Connecting non-Azure virtual machines using Azure Arc
Icon
Connecting non-Azure virtual machines using Microsoft Defender for Cloud portal pages
Icon
Setting up Amazon Web Services Config and Amazon Web Services Security Hub
Icon
Creating an Identity and Access Management AWS role for Microsoft Defender for Cloud
Icon
Connecting Amazon Web Services to Microsoft Defender for Cloud
Icon
Configuring GCP Security Command Center and enabling GCP Security Command Center API
Icon
Creating a GCP service account and connecting GCP to Microsoft Defender for Cloud
3
Chapter 3: Workflow Automation and Continuous Export
Icon
Chapter 3: Workflow Automation and Continuous Export
Icon
Technical requirements
Icon
Creating logic apps for use in Microsoft Defender for Cloud
Icon
Automating threat detection alert responses
Icon
Automating Microsoft Defender for Cloud recommendation responses
Icon
Automating regulatory compliance standards responses
Icon
Configuring continuous export to Event Hub
Icon
Configuring continuous export to a Log Analytics workspace
4
Chapter 4: Secure Score and Recommendations
Icon
Chapter 4: Secure Score and Recommendations
Icon
Technical requirements
Icon
Understanding, filtering, and sorting recommendations
Icon
Downloading a recommendation report
Icon
Creating a recommendation exemption rule
Icon
Creating a recommendation enforcement rule
Icon
Preventing creating resources using a Deny rule
Icon
Disabling a recommendation
Icon
Fixing recommendations on affected resources
Icon
Managing a recommendation query in Azure Resource Graph Explorer
Icon
Getting a secure score using Azure Resource Graph
5
Chapter 5: Security Alerts
Icon
Chapter 5: Security Alerts
Icon
Technical requirements
Icon
Filtering, grouping, and exporting security alerts
Icon
Responding to security alerts using automated responses
Icon
Creating suppression rules
Icon
Organizing security alerts and changing a security alert status
6
Chapter 6: Regulatory Compliance and Security Policy
Icon
Chapter 6: Regulatory Compliance and Security Policy
Icon
Technical requirements
Icon
Managing Microsoft Defender for Cloud's default security policy
Icon
Adding a custom security initiative and policy
Icon
Adding a regulatory compliance standard
Icon
Improving regulatory compliance, exempting, and denying a compliance control
Icon
Accessing and downloading compliance reports
7
Chapter 7: Microsoft Defender for Cloud Workload Protection
Icon
Chapter 7: Microsoft Defender for Cloud Workload Protection
Icon
Technical requirements
Icon
Enabling a vulnerability assessment solution
Icon
Enabling and configuring JIT access on a virtual machine
Icon
Requesting access to a JIT-enabled virtual machine
Icon
Configuring the adaptive application control group
Icon
Managing adaptive network hardening
Icon
Remediating vulnerabilities in Azure Container Registry images
Icon
Managing a SQL vulnerability assessment
Icon
Managing file integrity monitoring
8
Chapter 8: Firewall Manager
Icon
Chapter 8: Firewall Manager
Icon
Technical requirements
Icon
Creating an Azure firewall
Icon
Creating an Azure firewall using PowerShell
Icon
Creating an Azure firewall policy
Icon
Creating an Azure firewall policy using PowerShell
9
Chapter 9: Information Protection
Icon
Chapter 9: Information Protection
Icon
Creating and managing sensitivity labels
Icon
Creating and managing information types and managing information protection policy
10
Chapter 10: Workbooks
Icon
Chapter 10: Workbooks
Icon
Technical requirements
Icon
Creating a workbook from an existing template
Icon
Creating a workbook from an empty workbook
Icon
Managing workbooks and workbook templates
Icon
Why subscribe?
11
Other Books You May Enjoy
Icon
Other Books You May Enjoy
Icon
Packt is searching for authors like you
Icon
Share Your Thoughts

Chapter 2: Multi-Cloud Connectivity

In this chapter, you will learn how to connect your hybrid and multi-cloud computers to Azure and enable Microsoft Defender for Cloud to monitor the security posture of these connected resources.

Connecting your computing resources to Azure provides the convenience of monitoring their security posture through a single pane of glass, seeing recommendations, and performing security-related actions from a central place.

Connecting non-Azure computers to Azure involves several steps and, in this chapter, more complex actions will be divided into multiple recipes, each covering individual steps toward a bigger objective.

We will cover the following recipes in this chapter:

  • Connecting non-Azure virtual machines using Azure Arc
  • Connecting non-Azure virtual machines using Microsoft Defender for Cloud portal pages
  • Setting up Amazon Web Services Config and Amazon Web Services Security Hub
  • Creating an Identity and Access Management (IAM) Amazon Web Services (AWS) role for Microsoft Defender for Cloud
  • Connecting Amazon Web Services to Microsoft Defender for Cloud
  • Configuring GCP Security Command Center and enabling GCP Security Command Center API
  • Creating a GCP service account and connecting GCP to Microsoft Defender for Cloud
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Microsoft Defender for Cloud Cookbook
End of Section 2
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options
font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon