Microsoft Defenders: All Just Arrived Things You Have to Know

Microsoft Defender for Cloud

What is it?

Microsoft Defender for Cloud is a feature with security plans for cloud workload/s (Native Azure, Multi-Cloud). All resources under your subscriptions can be protected using respective defender plans.

Where to find it?

• Goto azure.com
• Search for Microsoft Defender for Cloud
• On the left pane, Management–>Environment settings
• Select your subscription.
• Settings–>Defender plans (Default view)

By default, plans are in a “turned off” state. Check pricing information before turning on the plan. Some plans are billed hourly, while others are every month.

Microsoft 365 Defender

What is it?

Microsoft 365 Defender is a defense suite with features to protect Cloud Applications, Endpoints, Office 365 Apps, and Identity.

Where to find it?

Go to > security.microsoft.com

Microsoft Defender for Cloud Apps

What is it?

Microsoft Defender for Cloud Apps is a security broker solution for cloud apps. All the apps used by end-users are monitored, and categorization is done as sanctioned & unsanctioned apps. Categorization helps to find the presence of shadow IT which may act as a security breaker point or entry-point for threats.

Where to find it?

• Goto microsoft.com
• On the left pane, click Clouds Apps> Cloud discovery
  

Microsoft Defender for Endpoints

What is it?

Microsoft Defender for Endpoints protects user devices from active threats. It also detects breaches, investigates and responds to incidents. Vulnerability management of endpoints, i.e., end-user devices, is handled by Microsoft Defender for Endpoints.

Where to find it?

• Go to microsoft.com
• On the left pane, click Endpoints > Vulnerability management > Dashboard

Microsoft Defender for Office 365

What is it?

Microsoft Defender for Office 365 protects Emails & Collaboration Tools like MS Teams, OneDrive, and OneNote from threats (Plan 1 feature). It also detects breaches and investigates and responds to incidents (Plan 2 features).

Where to find it?

• Goto microsoft.com
• On the left pane, click Email & Collaboration > Explorer.
  

Microsoft Defender for Identity

What is it?

Microsoft Defender for Identity protects on-premises identities from threats. The base principles for its working are always assumed breach, verified explicitly, and provided the least privilege.

Where to find it?

• Goto microsoft.com
• On the left pane, click Settings (at the bottom, last but three)>identities
  

Few more Defenders:

• Defender for Business is available as a standalone subscription and is included in Microsoft 365 Business Premium [1].
• Defender Vulnerability Management rapidly and continuously prioritizes the most significant vulnerabilities on your most critical assets and provides security recommendations to mitigate risk [2].
• Defender for IoT provides agentless network-layer monitoring and integrates with industrial equipment and security operation center (SOC) tools [3].
• Microsoft Defender Threat Intelligence (Defender TI) is a platform that streamlines triage, incident response, threat hunting, vulnerability management, and cyber threat intelligence analyst workflows when conducting threat infrastructure analysis and gathering threat intelligence [4].
• Microsoft Defender in Windows has the following capabilities [5]:
  

Summary

Microsoft Defender for Cloud:

Microsoft 365 Defender:

Image Source [6]

Microsoft 365 Defender:

Image Source [7]

References

[1]  What is Microsoft Defender for Business? | Microsoft Learn

[2] Microsoft Defender Vulnerability Management | Microsoft Learn

[3] Overview – Microsoft Defender for IoT for organizations – Microsoft Defender for IoT | Microsoft Learn

[4] What is Microsoft Defender Threat Intelligence (Defender TI)? | Microsoft Learn

[5] Microsoft Defender products and services | Microsoft Learn

[6] Microsoft Defender products and services | Microsoft Learn

[7] What is Microsoft Defender for Office 365? (A Beginner’s Guide) (itsasap.com)

About CloudThat