Summary
The number of security alerts and alerting systems far outnumbers the number of administrators with the necessary background and experience to make sure your environments are protected. Staying up to date with the latest attacks is a constant challenge, making it impossible to stay in place while the world of security is an ever-changing front.
Having a security response plan in place helps the team respond to active threats with defined procedures. Microsoft Defender for Cloud can help detect real threats to your workloads and provide guidance and automated responses so you can repel and quickly recover from an attack.
Further reading
To learn more about the topics in this module, check out the following links:
- Microsoft Security Intelligence
- Microsoft Defender for Cloud overview
- Microsoft Defender for Cloud documentation
- Azure Security blog
- Build automated workflows to integrate data and apps with Azure Logic Apps
- NIST Computer Security Incident Handling Guide
- Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains