[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ED5FRCVCS9YMXT438981JV":3,"skill-same:01M6ED5FRCVCS9YMXT438981JV":49},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":22,"linkOnly":23,"markdownContent":24,"markdownBody":24,"frontMatter":25,"refName":26,"commitSha":27,"skillDirectory":28,"forksCount":29,"repositoryHtmlUrl":30,"repositoryHomepageUrl":31,"ownerHtmlUrl":32,"ownerBlogUrl":6,"ownerDescription":33,"updatedAt":34,"install":35,"resources":48},"01M6ED5FRCVCS9YMXT438981JV","azure-defender-for-cloud",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-cloud\u002FSKILL.md",[],[18,19,20,21],"defender","azure","cloud","azure defender for cloud","2026-11-10 10:12:30",false,"# Azure Defender For Cloud Skill\n\nThis skill provides expert guidance for Azure Defender For Cloud. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https:\u002F\u002Fgithub.com\u002FMicrosoftDocs\u002Fmcp\u002Fblob\u002Fmain\u002FREADME.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text\u002Fmarkdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L37-L62 | Diagnosing and fixing Defender for Cloud issues: alert validation, container\u002FKubernetes deployment checks, multi-cloud connector errors, SQL\u002FStorage problems, and incident\u002Falert ID references. |\n| Best Practices | L63-L83 | Best practices for investigating and remediating vulnerabilities, misconfigurations, secrets, and API\u002Fendpoint\u002FKubernetes risks across Defender for Cloud, AKS, registries, and CI\u002FCD. |\n| Decision Making | L84-L101 | Guidance on choosing Defender for Cloud plans, portals, deployment and migration options, cost estimation\u002Fchargeback, DCU optimization, and planning agent\u002Frecommendation transitions. |\n| Architecture & Design Patterns | L102-L112 | Architectural guidance for Defender for Servers\u002FContainers: agentless scanning, malware\u002Fvuln detection on VMs\u002FKubernetes, data collection, residency, workspaces, and large-scale deployment. |\n| Limits & Quotas | L113-L123 | Limits, quotas, and prerequisites for Defender for Cloud features: free trials, data ingestion, APIs, DevOps, portal preview, alert export limits, and data collection extension changes. |\n| Security | L124-L200 | Security alerts, permissions, and hardening for Defender for Cloud: alert references by resource, RBAC\u002FCIEM setup, data handling, policies, and remediation for SQL, storage, containers, VMs, APIs, and more. |\n| Configuration | L201-L269 | How to configure and customize Defender for Cloud features: enable scans and alerts, set policies, exemptions, exports, DevOps\u002Fcontainers\u002FSQL\u002Fstorage settings, and cross-tenant\u002Fsecurity posture options. |\n| Integrations & Coding Patterns | L270-L298 | Integrating Defender for Cloud with CI\u002FCD, SIEM, EDR, ITSM, and third‑party security tools, exporting data via APIs\u002FARG, and automating alerts, tickets, and vulnerability workflows. |\n| Deployment | L299-L327 | Deploying and managing Defender for Cloud plans and agents (Containers, SQL, Storage, Servers) across AKS\u002FEKS\u002FGKE and hybrid, including CI\u002FCD, IaC, migration, and support matrices |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Validate Defender for Cloud alert generation and coverage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falert-validation |\n| Trigger and validate Defender for APIs alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-apis-validation |\n| Verify Defender for Containers deployment on EKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-aws-verify |\n| Verify Defender for Containers deployment on AKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-azure-verify |\n| Verify Defender for Containers deployment on GKE | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-gcp-verify |\n| Respond to Microsoft Defender for DNS security alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-dns-alerts |\n| Investigate and respond to Defender for Resource Manager alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-resource-manager-usage |\n| Reference deprecated Defender for Cloud alert IDs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdeprecated-alerts |\n| Remediate Defender for Cloud endpoint detection gaps | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fendpoint-detection-response-solution-recommendations |\n| Resolve common issues in Endor Labs integration | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ffaq-endor-labs |\n| Use Defender for Cloud incident reference catalog | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fincidents-reference |\n| Resolve agentless disk scan errors for GCP in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fresolve-disk-scanning-error |\n| Fix GCP Domain Restricted Sharing issues for Defender connector | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fresolve-gcp-sharing-policy |\n| Resolve GCP VPC Service Controls issues for Defender scanning | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fresolve-vpc-service-controls-issues |\n| Resolve Sentinel-connected AWS onboarding issues in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsentinel-connected-aws |\n| Troubleshoot AWS and GCP connectors in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshoot-connectors |\n| Troubleshoot Defender for SQL on Machines configuration | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshoot-sql-machines-guide |\n| Troubleshoot Defender for SQL on Machines deployment (gov) | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshoot-sql-machines-guide-gov |\n| Troubleshoot express and classic SQL vulnerability configurations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshoot-vulnerability-findings |\n| Troubleshoot common Microsoft Defender for Cloud issues | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshooting-guide |\n| Troubleshoot gated deployment issues in Kubernetes | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftroubleshooting-runtime-gated |\n| Interpret and act on Defender for Storage malware scan results | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Funderstand-malware-scan-results |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Apply agentless vulnerability assessment for containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fagentless-vulnerability-assessment-azure |\n| Review OS misconfiguration recommendations against MCSB baselines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fapply-security-baseline |\n| Review CI\u002FCD scan results in Cloud Security Explorer | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-cli-reviewing-results |\n| Investigate API security findings and posture in Defender for APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-apis-posture |\n| Remediate system update and patch recommendations in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-periodic-system-updates |\n| Investigate Defender for Endpoint misconfiguration recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fendpoint-detection-misconfiguration |\n| Remediate endpoint detection and response gaps in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fendpoint-detection-response-solution-recommendations |\n| Use Defender VA for AKS node OS and software | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fkubernetes-nodes-va |\n| Apply Defender networking recommendations for Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fprotect-network-resources |\n| Remediate cloud deployment secrets in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fremediate-cloud-deployment-secrets |\n| Remediate machine secrets findings in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fremediate-server-secrets |\n| Remediate machine vulnerability findings in Defender for Servers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fremediate-vulnerability-findings-vm |\n| Review security annotations on pull requests in GitHub and Azure DevOps | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Freview-pull-request-annotations |\n| Prioritize and fix vulnerabilities in AKS containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fview-and-remediate-vulnerabilities-containers |\n| Assess Kubernetes image vulnerabilities using Secure Score | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fview-and-remediate-vulnerabilities-for-images-secure-score |\n| Remediate registry image vulnerabilities using Secure Score | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fview-and-remediate-vulnerability-assessment-findings-secure-score |\n| Remediate registry image vulnerabilities in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fview-and-remediate-vulnerability-registry-images |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Understand Defender for Servers vulnerability scanning options | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fauto-deploy-vulnerability-assessment |\n| Choose between Azure and Defender portals for Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fazure-portal-vs-defender-portal-comparison |\n| Allocate Defender for Cloud costs via chargeback | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fchargeback |\n| Select and configure Defender for Cloud plans for GCP | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-google-plans |\n| Estimate Defender for Cloud costs with calculator | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcost-calculator |\n| Choose Defender for Containers deployment options | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-deployment-overview |\n| Decide between Defender for Storage classic and new plan | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-classic |\n| Migrate from Defender for Storage classic to new plan | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-classic-migrate |\n| Use BYOL vulnerability assessment with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdeploy-vulnerability-assessment-byol-vm |\n| Choose the right Defender for Servers plan | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers-select-plan |\n| Plan for Defender for Cloud Log Analytics agent retirement | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fprepare-deprecation-log-analytics-mma-agent |\n| Plan for Defender for Cloud Log Analytics agent retirement | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fprepare-deprecation-log-analytics-mma-agent |\n| Optimize Defender for Cloud spend with pre-purchase DCUs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fprepurchase-plan |\n| Plan transition from grouped to individual Defender recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftransition-grouped-individual-recommendations |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Use agentless malware scanning for virtual machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fagentless-malware-scanning |\n| Understand Defender for Containers security architecture | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-architecture |\n| Detect malware on Kubernetes nodes with Defender for Containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fkubernetes-nodes-malware |\n| Design a Defender for Servers deployment architecture | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers |\n| Understand Defender for Servers data collection design | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers-agents |\n| Plan Defender for Servers data residency and workspaces | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers-data-workspace |\n| Scale Microsoft Defender for Servers across environments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers-scale |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Use Defender for Servers data ingestion benefit and free quota | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-ingestion-benefit |\n| Review Defender for APIs deployment prerequisites | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-apis-prepare |\n| Understand current limitations of Defender portal preview | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-portal\u002Fknown-limitations |\n| Review support scope and prerequisites for DevOps security | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdevops-support |\n| Export Defender for Cloud alerts to CSV with limits | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexport-alerts-to-csv |\n| Check and understand Defender for Cloud free trial limits | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ffree-trial |\n| Understand Defender data collection extensions and retirement | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fmonitoring-components |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Understand Defender for Cloud alerts for AI services | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-ai-workloads |\n| Understand Defender for Cloud alerts for Azure App Service | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-app-service |\n| Understand Defender for Cloud alerts for Azure Cosmos DB | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-cosmos-db |\n| Understand Defender for Cloud alerts for Azure DDoS Protection | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-ddos-protection |\n| Understand Defender for Cloud alerts for Azure Key Vault | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-key-vault |\n| Understand Defender for Cloud alerts for Azure network layer | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-network-layer |\n| Understand Defender for Cloud alerts for Azure Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-storage |\n| Understand Defender for Cloud alerts for Azure VM extensions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-azure-vm-extensions |\n| Understand Defender for Containers and Kubernetes alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-containers |\n| Understand Defender for Cloud alerts for Defender for APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-defender-for-apis |\n| Understand Defender for Cloud alerts for DNS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-dns |\n| Understand Defender for Cloud alerts for Linux VMs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-linux-machines |\n| Understand Defender for Cloud alerts for open-source databases | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-open-source-relational-databases |\n| Navigate Defender for Cloud security alert references | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-reference |\n| Understand Defender for Cloud alerts for Resource Manager | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-resource-manager |\n| Understand Defender for Cloud alerts for SQL and Synapse | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-sql-database-and-azure-synapse-analytics |\n| Understand Defender for Cloud alerts for Windows VMs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-windows-machines |\n| Configure container runtime anti-malware policies | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fanti-malware |\n| Assign granular access to AWS and GCP connectors | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fassign-access-to-workload |\n| Understand GCP connector authentication architecture in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fauthentication-architecture-google-cloud |\n| Configure binary drift detection and blocking for containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fbinary-drift-detection |\n| Manage cloud scopes and unified RBAC in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcloud-scopes-unified-rbac |\n| Use the AKS security dashboard in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcluster-security-dashboard |\n| Understand AWS connector authentication architecture in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconcept-authentication-architecture-aws |\n| Use classic configuration to manage SQL vulnerability findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-vulnerability-findings-classic |\n| Use express configuration to manage SQL vulnerability findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-vulnerability-findings-express |\n| Permissions required for Defender for Containers on EKS and GKE | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontainers-permissions |\n| Monitor APIs for sensitive data exposure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-classification |\n| Understand Defender for Cloud data handling and security | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-security |\n| Configure secure authentication for Defender for Cloud CLI | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-cli-authentication |\n| Enable Microsoft Defender for Azure Cosmos DB | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-databases-enable-cosmos-protections |\n| Explore and investigate Defender for SQL security alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-sql-alerts |\n| Use Defender VA scanner for SQL servers on machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-sql-on-machines-vulnerability-assessment |\n| Interpret Defender for Storage threats and alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-threats-alerts |\n| Configure disable rules for container vulnerability findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdisable-vulnerability-findings-containers-secure-score |\n| Enable Defender for open-source databases on AWS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-defender-for-databases-aws |\n| Enable Defender for open-source databases on Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-defender-for-databases-azure |\n| Enable CIEM in Microsoft Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-permissions-management |\n| Enable and configure gated deployment for Kubernetes clusters | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenablement-guide-runtime-gated |\n| Understand Defender for Cloud permission requirements | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ffaq-permissions |\n| Address Defender for Cloud regulatory compliance questions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ffaq-regulatory-compliance |\n| Configure governance rules to enforce Defender remediation | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fgovernance-rules |\n| Use Purview data sensitivity in Defender alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Finformation-protection |\n| Apply Defender Kubernetes data plane hardening recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fkubernetes-workload-protections |\n| Configure on-upload malware scanning for Azure Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fon-upload-malware-scanning |\n| Assign Defender for Cloud roles and permissions with Azure RBAC | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpermissions |\n| Configure CIEM capabilities in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpermissions-management |\n| Configure roles and permissions for Defender for Servers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fplan-defender-for-servers-roles |\n| Manage Defender for Cloud user and personal data | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fprivacy |\n| Use Defender for Cloud AI security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-ai |\n| Apply Defender for Cloud API security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-api |\n| Use Defender for Cloud App Service security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-app-services |\n| Use Defender for Cloud compute security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-compute |\n| Apply Defender for Cloud container security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-container |\n| Use Defender for Cloud data security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-data |\n| Review deprecated Defender for Cloud security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-deprecated |\n| Apply Defender for Cloud DevOps security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-devops |\n| Use Defender for Cloud identity and access recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-identity-access |\n| Use Defender for Cloud IoT security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-iot |\n| Use Defender for Cloud Key Vault security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-keyvault |\n| Use Defender for Cloud networking security recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-networking |\n| Use Defender for Cloud serverless protection recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Frecommendations-reference-serverless-protection |\n| Interpret and act on Defender for Cloud recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Freview-security-recommendations |\n| Secure Kubernetes deployments with gated container images | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fruntime-gated-overview |\n| Sign and verify container vulnerability findings artifacts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsecure-container-image |\n| Configure security policies in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsecurity-policy-concept |\n| Simulate Defender for SQL alerts on machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsimulate-alerts-sql-machines |\n| Review and remediate SQL vulnerability assessment findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-find |\n| Configure and interpret Azure SQL vulnerability assessments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-overview |\n| Reference for SQL vulnerability assessment rules | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-rules |\n| Changelog for SQL vulnerability assessment rules | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-rules-changelog |\n| Prerequisites and permissions for Defender for Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsupport-matrix-defender-for-storage |\n| Manage tenant-wide permissions in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftenant-wide-permissions-management |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure advanced malware scanning for Defender for Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fadvanced-configurations-for-malware-scanning |\n| Configure agentless code scanning in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fagentless-code-scanning |\n| Configure Docker Hub vulnerability assessments with Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fagentless-vulnerability-assessment-docker-hub |\n| Configure JFrog Artifactory vulnerability assessments with Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fagentless-vulnerability-assessment-jfrog-artifactory |\n| Use Defender for Cloud alert schemas for integrations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Falerts-schemas |\n| Configure Azure Monitor Agent for Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fauto-deploy-azure-monitoring-agent |\n| Review prerequisites for data security posture | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconcept-data-security-posture-prepare |\n| Configure Microsoft Security Private Link for Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconcept-private-links |\n| Configure Microsoft Security DevOps extension in Azure DevOps | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-azure-devops-extension |\n| Configure Microsoft Security DevOps extension in Azure DevOps | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-azure-devops-extension |\n| Configure Defender for Cloud alert email notifications | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-email-notifications |\n| Set up private endpoints for Defender for Cloud via Security Private Link | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-private-endpoints |\n| Modify Defender for Servers coverage and plan settings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconfigure-servers-coverage |\n| Configure continuous export of Defender for Cloud data | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontinuous-export |\n| Configure continuous export with Azure Policy at scale | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontinuous-export-azure-policy |\n| Enable continuous export to event hubs behind firewalls | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontinuous-export-event-hub-firewall |\n| Analyze Defender for Cloud export data in Azure Monitor | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontinuous-export-view-data |\n| Define custom security standards and recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcreate-custom-recommendations |\n| Configure cross-tenant management with Azure Lighthouse | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcross-tenant-management |\n| Configure custom Data Collection Rules for Defender for Servers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-collection-rule |\n| Enable data security posture for Azure datastores | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-security-posture-enable |\n| Customize Defender data sensitivity settings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdata-sensitivity-settings |\n| Use Defender for Cloud CLI for security scanning | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-cli-overview |\n| Use Defender for Cloud CLI syntax for image and SBOM scans | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-cli-syntax |\n| Manage onboarding and offboarding for Defender for APIs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-apis-manage |\n| Programmatically enable Defender for Containers on Arc | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-arc-enable-programmatically |\n| Configure Defender for Containers settings on EKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-aws-configure |\n| Configure Defender for Containers settings on AKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-azure-configure |\n| Onboard Docker Hub registries to Defender for Containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-enable-external-registry-for-docker-hub |\n| Configure Defender for Containers settings on GKE | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-gcp-configure |\n| Enable and configure Defender for Storage classic via templates | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-classic-enable |\n| Set up automated malware remediation in Defender for Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-configure-malware-scan |\n| Enable vulnerability scanning with Defender Vulnerability Management | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdeploy-vulnerability-assessment-defender-vulnerability-management |\n| Disable specific VM vulnerability findings in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdisable-vulnerability-findings |\n| Configure exemptions and disable container VA findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdisable-vulnerability-findings-containers |\n| Configure agentless scanning for virtual machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-agentless-scanning-vms |\n| Enable API security posture in Defender CSPM | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-api-security-posture |\n| Enable and configure sensitive data threat detection for Storage | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-defender-for-storage-data-sensitivity |\n| Enable just-in-time access for Azure virtual machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-just-in-time-access |\n| Enable DevOps pull request security annotations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-pull-request-annotations |\n| Configure Defender Vulnerability Management for containers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-vulnerability-assessment |\n| Exclude machines from agentless scanning in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexclude-machines-agentless-scanning |\n| Configure resource exemptions for recommendations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexempt-resource |\n| Create large-scale policy exemptions in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexempt-resources-at-scale |\n| SQL VA express configuration Azure CLI commands reference | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexpress-configuration-azure-commands |\n| SQL VA express configuration PowerShell commands reference | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexpress-configuration-powershell-commands |\n| SQL VA express configuration PowerShell wrapper module reference | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexpress-configuration-sql-commands |\n| Enable and configure File Integrity Monitoring in Defender for Servers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ffile-integrity-monitoring-enable-defender-endpoint |\n| Configure end-user and app context for AI security alerts | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fgain-end-user-context-ai |\n| Configure Microsoft Security DevOps GitHub Action | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fgithub-action |\n| Enable agentless container posture in Defender CSPM | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fhow-to-enable-agentless-containers |\n| Configure IaC misconfiguration scanning with Microsoft Security DevOps | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fiac-vulnerabilities |\n| Configure and manage MCSB security standard | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fmanage-mcsb |\n| Enable Defender for Cloud on management groups via policy | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fonboard-management-group |\n| Use built-in Azure Policy definitions for Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpolicy-reference |\n| Onboard Defender for Cloud using PowerShell | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpowershell-onboarding |\n| PowerShell script to enable SQL VA express configuration | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpowershell-sample-vulnerability-assessment-azure-sql |\n| PowerShell script to set SQL VA baselines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpowershell-sample-vulnerability-assessment-baselines |\n| Query SBOM data in Defender for Cloud using Cloud Security Explorer | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fquery-software-bill-of-materials |\n| Set up Azure Policy guest configuration for Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsecurity-baseline-guest-configuration |\n| Reference sensitive information types in Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsensitive-info-types |\n| Enable SQL vulnerability assessment (Express) for Azure SQL and Synapse | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-enable |\n| Enable SQL vulnerability assessment (Classic) with storage account | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsql-azure-vulnerability-assessment-enable-classic |\n| Test agentless malware scanning alerts for VMs | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftest-agentless-malware-scanning |\n| Update configuration for Defender for SQL Servers on Machines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fupdate-sql-machine-configuration |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Connect Defender for Cloud data to Power BI | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fadd-data-power-bi |\n| Query Defender attack path data via ARG API | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fattack-path-api |\n| Integrate Defender for Cloud CLI into CI\u002FCD pipelines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fci-cd-pipeline-scanning-with-defender-cli |\n| Build Cloud Security Explorer queries for Kubernetes vulnerabilities | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcloud-security-explorer-kubernetes-clusters |\n| Connect Endor Labs with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconnect-endor-labs |\n| Connect Mend.io with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconnect-mend-io |\n| Connect ServiceNow ITSM with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fconnect-servicenow |\n| Set up Defender for Cloud continuous export via REST API | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcontinuous-export-rest-api |\n| Automate ServiceNow tickets with governance rules | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcreate-governance-rule-servicenow |\n| Create and sync ServiceNow tickets from Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fcreate-ticket-servicenow |\n| Programmatically deploy Defender for Containers on AKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-azure-enable-programmatically |\n| Consume and export Defender for SQL scan results via ARG | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-sql-scan-results |\n| Use partner API security testing with Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-partner-applications |\n| Enable Defender for Endpoint integration in Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-defender-for-endpoint |\n| Stream Defender for Cloud alerts to SIEM tools | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexport-to-siem |\n| Configure Azure resources to export alerts to QRadar and Splunk | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fexport-to-splunk-or-qradar |\n| Integrate AWS CloudTrail logs with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fintegrate-cloud-trail |\n| Integrate Defender for Endpoint with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fintegration-defender-for-endpoint |\n| Ingest GCP Cloud Logging into Defender for Cloud via Pub\u002FSub | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Flogging-ingestion |\n| Onboard 42Crunch API security with Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fonboarding-guide-42crunch |\n| Connect Bright Security DAST with Defender | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fonboarding-guide-bright |\n| Integrate StackHawk testing with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fonboarding-guide-stackhawk |\n| Use legacy security solution integrations with Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fpartner-integration |\n| Run Azure Resource Graph queries for Defender for Cloud | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fresource-graph-samples |\n| Use Defender VM subassessments for container vulnerabilities | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsubassessment-rest-api |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Integrate Defender for Cloud CLI into CI\u002FCD pipelines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fci-cd-pipeline-scanning-with-defender-cli |\n| Enable Defender for Containers on EKS via portal | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-aws-enable-portal |\n| Programmatically deploy Defender for Containers on EKS | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-aws-enable-programmatically |\n| Remove Defender for Containers from EKS clusters | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-aws-remove |\n| Remove Defender for Containers from AKS clusters | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-azure-remove |\n| Enable Defender for Containers on GKE via portal | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-gcp-enable-portal |\n| Programmatically deploy Defender for Containers on GKE | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-gcp-enable-programmatically |\n| Remove Defender for Containers from GKE clusters | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-containers-gcp-remove |\n| Migrate Defender for SQL to AMA autoprovisioning | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-sql-autoprovisioning |\n| Enable Defender for SQL Servers on Machines across environments | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-sql-usage |\n| Enable Defender for Storage via Azure portal | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-azure-portal-enablement |\n| Enable Defender for Storage with IaC templates | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-infrastructure-as-code-enablement |\n| Enable Defender for Storage using Azure Policy | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-policy-enablement |\n| Enable Defender for Storage with Azure PowerShell | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-powershell-enablement |\n| Enable Defender for Storage using REST API | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdefender-for-storage-rest-api-enablement |\n| Deploy Defender for Containers sensor via Helm | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fdeploy-helm |\n| Enable Defender for SQL on Machines at scale | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fenable-defender-sql-at-scale |\n| Deploy gated deployment agent via Infrastructure as Code | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fgated-deployment-infrastructure-as-code |\n| Identify SQL Servers still protected by Microsoft Monitoring Agent | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fidentify-sql-servers-protected-by-monitor-agent |\n| Migrate File Integrity Monitoring to Defender for Endpoint | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fmigrate-file-integrity-monitoring |\n| Review regional availability of Defender for Cloud plans | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fregional-availability |\n| Check Defender for Cloud interoperability and platform support | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsupport-matrix-defender-for-cloud |\n| Support matrix for Defender for Containers features | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsupport-matrix-defender-for-containers |\n| Review support matrix and requirements for Defender for Servers | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fsupport-matrix-defender-for-servers |\n| Deploy Microsoft Defender for Storage on Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Ftutorial-enable-storage-plan |\n| Verify Defender for SQL Servers on Machines protection status | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fdefender-for-cloud\u002Fverify-machine-protection |\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-cloud",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":36,"prompt":46,"zipAvailable":47},[37,40,43],{"tool":38,"command":39},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-cloud",{"tool":41,"command":42},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-cloud",{"tool":44,"command":45},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill azure-defender-for-cloud","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-defender-for-cloud\u002FSKILL.md",true,[],[50,64,74,83,89,96],{"skillNo":51,"name":52,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":53,"categories":54,"keywords":60,"publishedAt":22},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[55],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[61,62,63],"model","model hierarchy","model hierarchy skill",{"skillNo":65,"name":66,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":67,"categories":68,"keywords":70,"publishedAt":22},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[69],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},[71,72,73],"MCP","zoom","zoom mcp",{"skillNo":75,"name":76,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":22},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[80,81,82,72],"sdk","zoom apps sdk","apps",{"skillNo":84,"name":85,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":86,"categories":87,"keywords":88,"publishedAt":22},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[85],{"skillNo":90,"name":91,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":95,"publishedAt":22},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[94],{"categoryNo":56,"categoryName":57,"taxonomyType":58,"taxonomyTypeDesc":59},[91],{"skillNo":97,"name":98,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":22},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[98]]