Az.Security

Azure Security Center gives you control over the security of your Azure subscriptions and other machines that you connected to it outside of Azure.

Security

Add-AzSecurityAdaptiveNetworkHardening

Enforces the given rules on the NSG(s) listed in the request

Add-AzSecuritySqlVulnerabilityAssessmentBaseline

Add SQL vulnerability assessment baseline.

Confirm-AzSecurityAutomation

Validates the security automation model before create or update. Any validation errors are returned to the client

Disable-AzIotSecurityAnalyticsAggregatedAlert

Dismiss Iot aggregated alert

Disable-AzSecurityAdvancedThreatProtection

Disables the advanced threat protection policy for a storage / cosmosDB account.

Enable-AzSecurityAdvancedThreatProtection

Enables the advanced threat protection policy for a storage / cosmosDB account.

Get-AzAlertsSuppressionRule

Gets alerts suppression rules.

Get-AzAllowedConnection

Used to display allowed traffic between resources for the subscription

Get-AzDeviceSecurityGroup

Get device security group (IoT Hub security)

Get-AzDiscoveredSecuritySolution

Gets security solutions that were discovered by Azure Security Center

Get-AzExternalSecuritySolution

Get external security solution

Get-AzIotSecurityAnalytics

Get IoT security analytics

Get-AzIotSecurityAnalyticsAggregatedAlert

Get IoT security aggregated alert

Get-AzIotSecurityAnalyticsAggregatedRecommendation

Get IoT security aggregated recommendation

Get-AzIotSecuritySolution

Get IoT security solution

Get-AzJitNetworkAccessPolicy

Gets the JIT network access policies

Get-AzRegulatoryComplianceAssessment

Gets regulatory compliance assessments

Get-AzRegulatoryComplianceControl

Gets regulatory compliance controls

Get-AzRegulatoryComplianceStandard

Gets regulatory compliance standards

Get-AzSecurityAdaptiveApplicationControl

Gets a list of application control VM/server groups for the subscription.

Get-AzSecurityAdaptiveApplicationControlGroup

Gets an application control VM/server group.

Get-AzSecurityAdaptiveNetworkHardening

Gets a list of Adaptive Network Hardenings resources in scope of an extended resource.

Get-AzSecurityAdvancedThreatProtection

Gets the advanced threat protection policy for a storage / cosmosDB account.

Get-AzSecurityAlert

Gets security alerts that were detected by Azure Security Center

Get-AzSecurityAssessment

Gets security assessments and their results on a subscription

Get-AzSecurityAssessmentMetadata

Gets security assessments types and metadta in a subscription.

Get-AzSecurityAutomation

Gets security automations

Get-AzSecurityAutoProvisioningSetting

Gets the security automatic provisioning settings

Get-AzSecurityCompliance

Get the security compliance of a subscription over time

Get-AzSecurityContact

Gets security contacts that were configured on this subscription

Get-AzSecurityLocation

Gets the location where Azure Security Center will automatically save data for the specific subscription

Get-AzSecurityPricing

Gets the Azure Defender plans for a subscription in Azure Security Center.

Get-AzSecuritySecureScore

Gets security secure scores and their results on a subscription

Get-AzSecuritySecureScoreControl

Gets security secure score controls and their results on a subscription

Get-AzSecuritySecureScoreControlDefinition

Gets security secure score control definitions on a subscription

Get-AzSecuritySetting

Get security settings in Azure Security Center

Get-AzSecuritySolution

Get Security Solutions

Get-AzSecuritySolutionsReferenceData

Get Security Solutions Reference Data

Get-AzSecuritySqlVulnerabilityAssessmentBaseline

Get SQL vulnerability assessment baseline.

Get-AzSecuritySqlVulnerabilityAssessmentScanRecord

Gets SQL vulnerability assessment scan summary.

Get-AzSecuritySqlVulnerabilityAssessmentScanResult

Gets SQL vulnerability assessment scan results.

Get-AzSecuritySubAssessment

Gets sub assessments results in a subscription.

Get-AzSecurityTask

Gets the security tasks that Azure Security Center recommends you to do in order to strengthen your security posture.

Get-AzSecurityTopology

Gets a list of Security Topologies on a subscription

Get-AzSecurityWorkspaceSetting

Gets the configured security workspace settings on a subscription.

Get-AzSqlInformationProtectionPolicy

Retrieves the effective tenant SQL information protection policy.

New-AzAlertsSuppressionRuleScope

Helper cmdlet to create PSIScopeElement.

New-AzDeviceSecurityGroupAllowlistCustomAlertRuleObject

Create new allow list custom alert rule for device security group (IoT Security)

New-AzDeviceSecurityGroupDenylistCustomAlertRuleObject

Create new deny list custom alert rule for device security group (IoT Security)

New-AzDeviceSecurityGroupThresholdCustomAlertRuleObject

Create new threshold custom alert rule for device security group (IoT Security)

New-AzDeviceSecurityGroupTimeWindowRuleObject

Create new time window rule for device security group (IoT Security)

New-AzIotSecuritySolutionRecommendationConfigurationObject

Create new recommendation configuration for iot security solution

New-AzIotSecuritySolutionUserDefinedResourcesObject

Create new user defined resources for iot security solution

New-AzSecurityAutomation

Creates new security automation

New-AzSecurityAutomationActionObject

Creates new security automation action object

New-AzSecurityAutomationRuleObject

Creates security automation rule object

New-AzSecurityAutomationRuleSetObject

Creates security automation rule set object

New-AzSecurityAutomationScopeObject

Creates security automation scope object

New-AzSecurityAutomationSourceObject

Creates security automation source object

Remove-AzAlertsSuppressionRule

Deletes an alerts suppression rule.

Remove-AzDeviceSecurityGroup

Delete device security group

Remove-AzIotSecuritySolution

Delete IoT security solution

Remove-AzJitNetworkAccessPolicy

Deletes a JIT network access policy.

Remove-AzSecurityAssessment

Deletes a security assessment result from a subscription.

Remove-AzSecurityAssessmentMetadata

Deletes a security assessment metadata from a subscription.

Remove-AzSecurityAutomation

Deletes security automation

Remove-AzSecurityContact

Deletes a security contact.

Remove-AzSecuritySqlVulnerabilityAssessmentBaseline

Removes SQL vulnerability assessment baseline.

Remove-AzSecurityWorkspaceSetting

Deletes the security workspace setting for this subscription.

Set-AzAlertsSuppressionRule

Create or update an alerts suppression rule.

Set-AzDeviceSecurityGroup

Create or update device security group

Set-AzIotSecuritySolution

Create or update IoT security solution

Set-AzJitNetworkAccessPolicy

Updates JIT network access policy.

Set-AzSecurityAlert

Updates a security alert state.

Set-AzSecurityAssessment

Create or update a security assessment result on a resource

Set-AzSecurityAssessmentMetadata

Creates or updates a security assessment type.

Set-AzSecurityAutoProvisioningSetting

Updates automatic provisioning setting

Set-AzSecurityContact

Updates a security contact for a subscription.

Set-AzSecurityPricing

Enables or disables Azure Defender plans for a subscription in Azure Security Center.

Set-AzSecuritySetting

Update a security setting in Azure Security Center

Set-AzSecuritySqlVulnerabilityAssessmentBaseline

Sets new SQL vulnerability assessment baseline on a specific database discards old baseline if any exists.

Set-AzSecurityWorkspaceSetting

Updates the workspace settings for the subscription.

Set-AzSqlInformationProtectionPolicy

Sets the effective tenant SQL information protection policy.

Start-AzJitNetworkAccessPolicy

Invokes a temporary network access request.

Update-AzIotSecuritySolution

Update one or more of the following properties in IoT security solution: tags, recommendation configuration, user defined resources