Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Microsoft Defender for Cloud Cookbook
  • Table Of Contents Toc
  • Feedback & Rating feedback
Microsoft Defender for Cloud Cookbook

Microsoft Defender for Cloud Cookbook

By : Sasha Kranjac
5 (4)
Buy this Book
close
close
Microsoft Defender for Cloud Cookbook

Microsoft Defender for Cloud Cookbook

5 (4)
By: Sasha Kranjac
Buy this Book

Overview of this book

Microsoft Defender for Cloud is a multi-cloud and hybrid cloud security posture management solution that enables security administrators to build cyber defense for their Azure and non-Azure resources by providing both recommendations and security protection capabilities. This book will start with a foundational overview of Microsoft Defender for Cloud and its core capabilities. Then, the reader is taken on a journey from enabling the service, selecting the correct tier, and configuring the data collection, to working on remediation. Next, we will continue with hands-on guidance on how to implement several security features of Microsoft Defender for Cloud, finishing with monitoring and maintenance-related topics, gaining visibility in advanced threat protection in distributed infrastructure and preventing security failures through automation. By the end of this book, you will know how to get a view of your security posture and where to optimize security protection in your environment as well as the ins and outs of Microsoft Defender for Cloud.
Table of Contents (12 chapters)
close
close
close
Preface
chevron up
Preface
Who this book is for
What this book covers
To get the most out of this book
Download the color images
Conventions used
Get in touch
Reviews
Share Your Thoughts
1
Chapter 1: Getting Started with Microsoft Defender for Cloud
Chapter 1: Getting Started with Microsoft Defender for Cloud
Technical requirements
Enabling Microsoft Defender for Cloud Plans on Azure Subscriptions and Log Analytics Workspaces
Enabling an Microsoft Defender for Cloud Plans on an Azure Subscription
Enabling an Microsoft Defender for Cloud Plans on a Log Analytics Workspace
Enabling an Microsoft Defender for Cloud Plans on multiple Azure Subscriptions and Log Analytics Workspaces
Configuring data collection in a Log Analytics Workspace
Configuring provisioning extensions automatically
Enabling a Log Analytics agent for Azure VMs manually in the Log Analytics Workspace settings
Enabling a Log Analytics agent for Azure VMs manually in the Virtual Machine settings
Configuring a Log Analytics agent for Azure VMs extension deployment
Configuring email notifications
Assigning Microsoft Defender for Cloud permissions
Onboarding Microsoft Defender for Cloud using PowerShell
Enabling Microsoft Defender for Cloud integration with other Microsoft security services
Free Chapter
2
Chapter 2: Multi-Cloud Connectivity
Chapter 2: Multi-Cloud Connectivity
Technical requirements
Connecting non-Azure virtual machines using Azure Arc
Connecting non-Azure virtual machines using Microsoft Defender for Cloud portal pages
Setting up Amazon Web Services Config and Amazon Web Services Security Hub
Creating an Identity and Access Management AWS role for Microsoft Defender for Cloud
Connecting Amazon Web Services to Microsoft Defender for Cloud
Configuring GCP Security Command Center and enabling GCP Security Command Center API
Creating a GCP service account and connecting GCP to Microsoft Defender for Cloud
3
Chapter 3: Workflow Automation and Continuous Export
Chapter 3: Workflow Automation and Continuous Export
Technical requirements
Creating logic apps for use in Microsoft Defender for Cloud
Automating threat detection alert responses
Automating Microsoft Defender for Cloud recommendation responses
Automating regulatory compliance standards responses
Configuring continuous export to Event Hub
Configuring continuous export to a Log Analytics workspace
4
Chapter 4: Secure Score and Recommendations
Chapter 4: Secure Score and Recommendations
Technical requirements
Understanding, filtering, and sorting recommendations
Downloading a recommendation report
Creating a recommendation exemption rule
Creating a recommendation enforcement rule
Preventing creating resources using a Deny rule
Disabling a recommendation
Fixing recommendations on affected resources
Managing a recommendation query in Azure Resource Graph Explorer
Getting a secure score using Azure Resource Graph
5
Chapter 5: Security Alerts
Chapter 5: Security Alerts
Technical requirements
Filtering, grouping, and exporting security alerts
Responding to security alerts using automated responses
Creating suppression rules
Organizing security alerts and changing a security alert status
6
Chapter 6: Regulatory Compliance and Security Policy
Chapter 6: Regulatory Compliance and Security Policy
Technical requirements
Managing Microsoft Defender for Cloud's default security policy
Adding a custom security initiative and policy
Adding a regulatory compliance standard
Improving regulatory compliance, exempting, and denying a compliance control
Accessing and downloading compliance reports
7
Chapter 7: Microsoft Defender for Cloud Workload Protection
Chapter 7: Microsoft Defender for Cloud Workload Protection
Technical requirements
Enabling a vulnerability assessment solution
Enabling and configuring JIT access on a virtual machine
Requesting access to a JIT-enabled virtual machine
Configuring the adaptive application control group
Managing adaptive network hardening
Remediating vulnerabilities in Azure Container Registry images
Managing a SQL vulnerability assessment
Managing file integrity monitoring
8
Chapter 8: Firewall Manager
Chapter 8: Firewall Manager
Technical requirements
Creating an Azure firewall
Creating an Azure firewall using PowerShell
Creating an Azure firewall policy
Creating an Azure firewall policy using PowerShell
9
Chapter 9: Information Protection
Chapter 9: Information Protection
Creating and managing sensitivity labels
Creating and managing information types and managing information protection policy
10
Chapter 10: Workbooks
Chapter 10: Workbooks
Technical requirements
Creating a workbook from an existing template
Creating a workbook from an empty workbook
Managing workbooks and workbook templates
Why subscribe?
11
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Share Your Thoughts

What this book covers

Chapter 1, Getting Started with Microsoft Defender for Cloud, introduces the basic but fundamental Defender for Cloud configuration and performs the initial configuration.

Chapter 2, Multi-Cloud Connectivity, shows you how to connect AWS and GCP environments to Defender for Cloud.

Chapter 3, Workflow Automation and Continuous Export, explains how to configure Defender for Cloud workflow automations, automate responses, and configure continuous data export.

Chapter 4, Secure Score and Recommendations, explains how to work with and interpret the secure score and manage security recommendations.

Chapter 5, Security Alerts, demonstrates how to manage and respond to security alerts.

Chapter 6, Regulatory Compliance and Security Policy, explains how to manage Defender for Cloud security policies and manage regulatory compliance standards.

Chapter 7, Microsoft Defender for Cloud Workload Protection, covers the protection capabilities of Defender for Cloud plans.

Chapter 8, Firewall Manager, demonstrates how to secure Azure assets and public endpoints by controlling network traffic to and from Azure.

Chapter 9, Information Protection, discusses Defender for Cloud's ability to generate alerts and recommendations based on information policy data.

Chapter 10, Workbooks, shows how to create and manage workbooks in Defender for Cloud.

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
Start a 7-day FREE trial
Next Section
bookmark search playlist download
font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY