1,200 questions with Microsoft Defender for Cloud-related tags

Sort by: Updated
Updated Created Answers
1 answer

Disable Microsoft Defender for Cloud for select virtual machines in Azure

I have several VMs running Windows 10/11 and Ubuntu in my Azure vnet and I really don't need them included in Microsoft Defender for Cloud. I've done some searching and apparently there is no way to select which VMs are included in the service, it's an…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,150 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-05-02T01:43:52.0066667+00:00
Paul Nerie 266 Reputation points
commented 2024-05-02T06:20:40.0033333+00:00
Paul Nerie 266 Reputation points
0 answers

Regulatory compliance reports not accurately affecting security

I have some regulatory compliance reports still showing unhealthy resources 3 days after the problem as been remediated. Any idea why this could be happening?

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
798 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-05-02T01:56:01.4533333+00:00
DG001 346 Reputation points Microsoft Employee
1 answer

Defender for Endpoint Policies

Hello If a workstation or server is onboarded to defender for endpoint and no security policies have been pushed to the endpoint, what are the default settings or configuration that defender uses? does it stay dormant until policies are pushed? Thanks

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
339 questions
asked 2024-05-01T18:52:24.1+00:00
berketjune2012 351 Reputation points
answered 2024-05-02T01:40:40.5466667+00:00
Crystal-MSFT 43,221 Reputation points Microsoft Vendor
4 answers

Windows Defender SenseNdr.exe Application Crashing Events

Faulting application name: SenseNdr.exe, version: 2.3.1.0, time stamp: 0x7484efee Faulting module name: SenseNdr.exe, version: 2.3.1.0, time stamp: 0x7484efee Exception code: 0xc0000409 Fault offset: 0x000000000071f9c1 Faulting process id:…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2023-08-02T16:59:39.43+00:00
Vrindavan Patange 130 Reputation points
commented 2024-05-01T22:25:29.8633333+00:00
Glenn Turner 10 Reputation points
0 answers

Microsoft Vulnerability Manager Security Recommendations - Python

Microsoft Vulnerability Manager Security Recommendations is advising to Update Python as it is currently version 3.7.7.0 however, when installing Python latest version (3.12.30) from https://www.python.org/downloads/ it is still reporting on Microsoft…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-05-01T10:08:51.46+00:00
Jack Fields 25 Reputation points
1 answer One of the answers was accepted by the question author.

Choosing between Defender for Endpoint and Defender for Server for servers with no internet connectivity

We are planning to migrate from Symantec® Endpoint Security to Microsoft, specifically looking for EDR and XDR features for our On Prem servers that have no connectivity to the internet. Should we use Defender for Endpoint or Defender for Servers? We are…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-23T07:49:38.81+00:00
milo last 20 Reputation points
accepted 2024-04-30T13:28:13.99+00:00
milo last 20 Reputation points
0 answers

Azure iot defender micro agent - [procfs_reader.c/read_data_from_procfs:101] Error getting username in pid

Hi, When configuring the azure iot defender micro agent on the iot edge device (azure vm) we uncounted the following error message - [procfs_reader.c/read_data_from_procfs:101] Error getting username in pid When checking the status its running, its…

Azure IoT
Azure IoT
A category of Azure services for internet of things devices.
382 questions
Azure IoT Edge
Azure IoT Edge
An Azure service that is used to deploy cloud workloads to run on internet of things (IoT) edge devices via standard containers.
540 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-30T08:27:45.61+00:00
Dinesh, Midhun 0 Reputation points
0 answers

FIM in defender not showing file changes for newly created file after 3 days also.

Team, I have enabled FIM on one of the Resource Group it has created one default Log Analytics Workspace, DCR rule. We executed a script that will create test file on all VM's in /etc and C:\windows\system32 directory. But those changes are not yet…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-30T06:15:50.83+00:00
Disha Bodade 65 Reputation points
edited the question 2024-04-30T07:43:48.3433333+00:00
VarunTha 3,285 Reputation points Microsoft Vendor
1 answer

What is best way to keep up to date employer's devices?

I'm looking for a solution with minimum administrator effort for keeping up to date on all employer's devices. In the organization, I have about 50 devices that they onboarded to Defender for Cloud's portal. All devices showing on Microsoft Defender…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,355 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
11 questions
asked 2024-04-03T00:01:57.0166667+00:00
Mohsen Akhavan 936 Reputation points
commented 2024-04-30T06:51:41.01+00:00
Crystal-MSFT 43,221 Reputation points Microsoft Vendor
1 answer

Integrating Microsoft Sentinel with Microsoft Defender XDR

I am trying to Integrate microsoft sentinel and defender XDR. So here are the steps I have done so far. Log analytics created, Sentinel attached to the workspace enabled the defender connector . after enabling the connector , I have enabled…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-29T08:54:17.4333333+00:00
Anand Rao Nednur 0 Reputation points
answered 2024-04-29T23:04:14.9733333+00:00
Marilee Turscak-MSFT 33,951 Reputation points Microsoft Employee
2 answers

Defender I use GPO Can Switch Config policy On Defender Mange by MDE device configuration management ?

Now plan deploy MDE my PC joins local AD which makes it difficult to manage policy through GPO. Is this possible? If I want to use Switch Gpo policy through Device configuration management MDE?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,819 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
11 questions
asked 2024-04-25T09:12:13.4166667+00:00
TECHIT SRIWICHAI 160 Reputation points
answered 2024-04-29T08:03:52.72+00:00
Catherine Kyalo 570 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Is there a way to enable Defender for Servers in Azure by resource group within a subscription?

Working on deploying Defender for Cloud and wanting to enable Defender for Servers in Azure on a subscription but don't want all servers within the subscription to have it enabled just yet. Would prefer to target servers in specific resource groups…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-26T14:45:09.53+00:00
Adrienne Gotwalt 20 Reputation points
edited the question 2024-04-29T05:25:43.6866667+00:00
OMMI NAVEEN KUMAR 195 Reputation points Microsoft Vendor
0 answers

How To Remediate Azure Secure Score Recommendations

Hello, I have this is security recommendation showing in Defender for Cloud, "Azure Machine Learning Computes should have local authentication methods disabled", the remediation steps given is to toggle "Enable SSH access" off. I…

Azure Machine Learning
Azure Machine Learning
An Azure machine learning service for building and deploying models.
2,568 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-03-01T02:36:26.8366667+00:00
Andy Lau Pik Hui 60 Reputation points
commented 2024-04-26T01:30:20.87+00:00
Andy Lau Pik Hui 60 Reputation points
1 answer

Error when using Advanced Hunting

Hello, I have a customer that is getting the error below when using advanced hunting and is unable to search 'EmailEvents' and would like some insight on it?   Issue: When using the Advanced Hunting option, the object 'EmailEvents' returns: "Syntax…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-23T20:11:31.1466667+00:00
DG001 346 Reputation points Microsoft Employee
commented 2024-04-26T00:10:16.78+00:00
DG001 346 Reputation points Microsoft Employee
5 answers

Defender 365 admin console - Disabled Connected to a custom indicator & Connected to a unsanctionned blocked app rules

I want to know how I can disable these two following alerts : Disabled Connected to a custom indicator Connected to an unsanctioned blocked app I didn't find these alerts on the Alerts Policy of XDR/EPP or Cloud apps. Since all the changed that…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
103 questions
asked 2024-03-21T14:28:41.46+00:00
Étienne Fiset 45 Reputation points
answered 2024-04-25T18:15:54.0566667+00:00
Étienne Fiset 45 Reputation points
0 answers

Logic App - Internal Server Error for HTTP request

Hello, I'm working on a logic app integration with Microsoft Defender for Vulnerability. I use HTTP request to authenticate with Microsoft Defender API. …

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,819 questions
Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,853 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-22T10:52:35.3133333+00:00
Hrabec Pavel 0 Reputation points
commented 2024-04-25T12:36:53.7633333+00:00
Hrabec Pavel 0 Reputation points
0 answers

Run a phishing simulation

No matter what type of simulation I am doing. They are not working.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,819 questions
Not Monitored
Not Monitored
Tag not monitored by Microsoft.
36,105 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-15T18:48:10.51+00:00
Dennis Machado (Tek Experts) 0 Reputation points Microsoft Vendor
commented 2024-04-25T09:54:24.62+00:00
Pauline Mbabu 10 Reputation points Microsoft Employee
2 answers

Defender for Business onboarding endpoint

When running Microsoft Defender Endpoint onboarding for manual device onboarding, the error occurs: Error ID: 15, Error Level: 1. I have already carried out all the procedures in this answer:…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-22T23:49:47.3833333+00:00
Maguino Oliveira - Safety Computer 0 Reputation points
answered 2024-04-25T06:52:45.3166667+00:00
Givary-MSFT 28,231 Reputation points Microsoft Employee
2 answers One of the answers was accepted by the question author.

Defender P2 Qualys Deprecation -> switch to MDE for MDVM

Qualys is being deprecated to be used together with Cloud Defender for Servers Plan 2. In the documentation I read that MDVM is part of MDE, either plan 1 or plan 2. Plan 1 has basic vulnerability scanning and p2 supplies addons to that basic…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-18T05:07:22.7233333+00:00
BartDecker-8243 175 Reputation points
answered 2024-04-25T06:17:07.11+00:00
BartDecker-8243 175 Reputation points
1 answer One of the answers was accepted by the question author.

Custom detection in MDE

I am trying to create Custom Detection in Microsoft Security Center where my query has multiple Join and summarize statements. Whenever I am running query its providing results but after saving in Custom Detection form and under its results section its…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
3,819 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,757 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,200 questions
asked 2024-04-23T12:01:01.1433333+00:00
Ankush Kumar 35 Reputation points
accepted 2024-04-24T07:49:17.5166667+00:00
Ankush Kumar 35 Reputation points