Microsoft Defender for Cloud - IT Best Practices - Microsoft Press

Microsoft Defender for Cloud, formerly Azure Security Center, has evolved into one of the world's most widely-used Cloud Security Posture Management (CSPM) environments and Cloud Workload Protection Platforms (CWPP). The name change reflects Microsoft's powerful commitment to multi-cloud environments-just part of major recent advances in the product. Protecting workloads running in Azure, hybrid, and other cloud platforms, as well as on premises, it offers comprehensive tools for hardening resources, tracking security posture, protecting against cyberattacks, and streamlining security management-all in one natively integrated toolset.

Leading Microsoft Azure experts Yuri Diogenes and Tom Janetscheck help you apply Defender for Cloud's robust protection, detection, and response capabilities in key operational scenarios. Reflecting updates through mid-2022, it shows how to take full advantage of recently introduced components, feature enhancements, and deployment scenarios, as you address today's latest threat vectors. Diogenes and Janetscheck walk you through securing any Azure workload, and strengthening security in everything from policies and identity to incident response and risk management.

Sharing insider insights, tips, tricks and operational optimizations only available from full-time members of Microsoft's Defender for Cloud team, the authors offer new and revised coverage of using Defender with virtual machines and virtual networks, databases, websites, apps, logging, auditing, and storage. They cover Cloud Security Posture Management, Microsoft's Cloud Workload Protection Platform, integration with the Azure Sentinel SIEM/SOAR, advanced automation, deployment at scale, access via APIs and Intelligent Secure Graph, and more. Whatever your security role or level of experience, you'll learn how to save hours, days, or even weeks by addressing new security problems more efficiently and reliably.