Microsoft Defender for Cloud CWP Datasheet - Garmin Manual (EN)

Protect your multicloud, hybrid, and on-premises workloads

Cloud Workload Protection in Microsoft Defender for Cloud Protect your multicloud, hybrid, and on-premises workloads. Detect attacks and respond in real time with cloud workload protection solutions. 41% 30% of cloud security professionals think cloud workload protection (CWP) is the most important area in cloud security. 1 of these professionals think CWP is their top challenge area. 1 Microsoft Defender for Cloud Microsoft Defender for Cloud DevOps Security Management Cloud Security Posture Management Cloud Workload Protection DevOps CWP CIEM EASM Compute: - Any server Azure VMSS Azure K8s App Services Unmanaged K8s Service layer :

Azure DNS Key Vault Network Layer V1 Resource Management Databases and storage: - Blob storage File storage Maria DB Cosmos DB Azure SQL MySQL Postgres SQL Unmanaged SQL AWS workloads: - - Amazon EKS Amazon EC2 Unmanaged SQL Unmanaged Kubernetes GCP workloads: - - GKE clusters Google Compute Unmanaged SQL Unmanaged Kubernetes On-premises workloads: Kubernetes SQL Servers Servers Servers Defend your multicloud, hybrid, and on-premises environment Protect all layers of your multicloud and on-premises environment, including critical workloads like servers, databases, containers, storage, and service layer.

Reduce your attack surface Identify and remediate vulnerabilities before they’re exploited and automatically safeguard new workloads as soon as they’re deployed. Respond to threats in real time Prioritize your response with correlated alerts and a centralized view that integrates with your security information and event management (SIEM) system. Accelerate investigations Stay ahead of cross-platform attacks with integrated investigation and hunting with Microsoft 365 Defender and Microsoft Defender Threat Intelligence.

Стр. 1

Defender for Storage

Defender for Servers Hybrid, multilayered security approach Protecting from within and outside the server OS Microsoft Defender for Cloud Microsoft Defender for Endpoint Cloud-native VM CPSM and CWP Advanced assessments, detections and controls—tailored for servers running in the cloud. Market-leading endpoint protection suite for real-time detection, response, hunting and policy enforcement.

Agentless vulnerability scanning Agent-based insights At-scale, instantaneous visibility on OS posture issues Deep OS visibility (processes, communications, etc.) No performance impact on workloads Real-time monitoring and detection of attacks Security team does not depend on workload owners Enforce policies, prevent, respond, and remediate attacks Defender for Storage To counter the top security risks for cloud storage—malware uploading, exfiltration of sensitive data, and cloud ransomware attacks, Defender for Storage built its detection suite based on the MITRE ATT&CK® framework.

These detections look at suspicious behavior and activities, unusual access signatures, malware that has been uploaded and malware that has been distributed. Suspicious access patterns Upload of malicious content Access from a Tor exit node Access from suspicious IPs Access from suspicious applications Unusual anonymous access Access from an unusual location Access from an unusual application Malware upload (hash-based) Distribution of malware from the storage account Unusual upload of files !

Suspicious behavior Other threats Unusual amount of data extracted Unusual access inspection Unusual change of permissions Unusual data exploration Unusual deletion Scanning attempts of publicly open containers Potentially sensitive data has been made publicly available Phishing content hosted on an account Coming next: blobs scanning

Стр. 2

Defender for Containers

Defender for Storage continued How Defender for Storage counters risks Advanced layer of security to better protect storage workloads Contextual alerts upon unusual and potentially harmful attempts to breach storage workloads Recommendations to help harden the security posture of the storage environment Microsoft advanced technologies including its unique Threat Intelligence capabilities Defender for Containers The dynamic and ephemeral nature of container deployment creates flexibility but also blind spots for posture management and weak spots for protection. Defender for Containers protects all weak links of your container deployment based on the MITRE ATT&CK® framework.

Risk points of container environments How Defender for Containers counters risks + + +ttJ Hardening Agentless vulnerability management Advanced threat detection Multicloud support Deployment and monitoring

Стр. 3

Protect multicloud environmentsfrom development to runtime

Database protection Defender for Cloud protects various types of databases in multicloud environments, it is also built-in with Azure and supports one-click enablement. Additionally, Microsoft Threat Intelligence powers the vulnerability and threat detections to counter SQL injection, brute force attack, behavioral anomalies, data exfiltration, and malicious querying.

Defender for SQL PaaS Azure SQL Database Azure SQL Managed Instance Azure SQL Elastic Pools Dedicated SQL pool in Azure Synapse Defender for SQL IaaS SQL Server on-prem Azure Arc enabled SQL Server SQL Server on Azure VM SQL Server on any other cloud Defender for OSS DB Azure Database for MariaDB Azure Database for MySQL Azure Database for PostgreSQL Defender for Azure Cosmos DB Azure Cosmos DB Microsoft Security: a Leader in six Gartner Magic Quadrants 2 and eight Forrester Wave TM categories. 3 What customers are saying "It’s difficult to ensure that we have full insights from a security perspective when our platforms are so varied. We wanted protection and visibility everywhere.

That’s why we use Defender for Cloud—it gives us single pane of glass visibility across our hybrid and multicloud environment.” Raoul van der Voort Global Service Owner, Cyber Defense Center Rabobank Customer story Learn more ESG Technical Validation Defender for Cloud Blog Defender for Cloud in the field video series Microsoft Defender for Cloud Interactive Guide Defender for Cloud Tech Community Documentation and quick starts Protect multicloud environments from development to runtime Start a free trial 1 Cloud Security Practices and Priorities Report, Emerald Research Group, March 2022 2 GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S.

and internationally and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. 3 The Forrester Wave™is copyrighted by Forrester Research, Inc.

Forrester and Forrester Wave™are trademarks of Forrester Research, Inc. The Forrester Wave™is a graphical representation of Forrester’s call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester Wave™. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change. © Microsoft Corporation. All rights reserved. This material is provided for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESSED OR IMPLIED.

Стр. 4