{"id":38630,"date":"2020-12-10T19:00:50","date_gmt":"2020-12-10T19:00:50","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=92344"},"modified":"2020-12-10T19:00:50","modified_gmt":"2020-12-10T19:00:50","slug":"new-cloud-native-breadth-threat-protection-capabilities-in-azure-defender","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/new-cloud-native-breadth-threat-protection-capabilities-in-azure-defender\/","title":{"rendered":"New cloud-native breadth threat protection capabilities in Azure Defender"},"content":{"rendered":"

As the world adapts to working remotely, the threat landscape is constantly evolving, and security teams struggle to protect workloads with multiple solutions that are often not well integrated nor comprehensive enough. This results in serious threats avoiding detection, as well as security teams suffering from alert fatigue.<\/p>\n

Azure Defender helps security professionals with an integrated experience to meet your cloud workload protection needs spanning virtual machines, SQL, storage, containers, IoT, Azure network layer, Azure Key Vault, and more.<\/p>\n

Today we are excited to announce we are adding two new protections with the preview of Azure Defender for Resource Manager and Azure Defender for DNS, cloud-native breadth threat protection solutions. These new protections continue to improve your resiliency against attacks from bad actors and increase the number of Azure resources protected by Azure Defender significantly.<\/p>\n

Azure Defender for Resource Manager<\/h2>\n

Azure Resource Manager<\/a> is the deployment and management service for Azure. It enables the creation and updating of all resources in your Azure account, with features, like access control, locks, and tags.<\/p>\n

The cloud management layer is a crucial service-connected to all your cloud resources. Because of this, it is also a potential target for attackers. Consequently, we recommend security operations teams monitor the Resource Manager layer closely.<\/p>\n

Azure Defender for Resource Manager will automatically monitor all resource management operations performed in your organization whether they are performed through the Azure portal, Azure REST APIs, Azure CLI, or other Azure programmatic clients. Defender runs advanced security analytics to detect threats and alert you when suspicious activity occurs.<\/p>\n

\"Azure<\/p>\n

Figure 1: Azure Defender for Resource Manager monitors resource management operations to protect your Azure environment.<\/em><\/p>\n

Azure Defender for Resource Manager protects against issues including:<\/p>\n