mcpField
A
azure-defender-for-cloud

azure-defender-for-cloud

github.com/microsoftdocs安全796195 次安装3 天前更新
代码仓库

关于 azure-defender-for-cloud

面向使用 Azure Defender for Cloud 的团队，提供故障排查、安全配置、架构、集成和部署参考。技能结合本地速查资料与远程文档获取，覆盖 Azure 和多云安全主题。

主要功能

  1. 01告警与部署故障排查
  2. 02安全建议与修复
  3. 03计划与覆盖范围决策
  4. 04多云安全架构
  5. 05配置和策略调整
  6. 06集成与部署指导

适用场景

  1. 01调查 Defender for Cloud 告警
  2. 02修复安全发现与错误配置
  3. 03规划多云保护范围
  4. 04自动化安全数据与部署

MCP 相关

此技能可通过 `mcp_microsoftdocs:microsoft_docs_fetch` 获取远程文档，也提供网页抓取备用方式。

安装

复制下面的命令，在终端中运行。

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-defender-for-cloud

安装后在 Claude Code 中输入/azure-defender-for-cloud确认已加载。

详细介绍

Azure Defender For Cloud 技能

此技能为 Azure Defender For Cloud 提供专业指导，涵盖故障排除、最佳实践、决策、架构与设计模式、限制与配额、安全性、配置、集成与编码模式，以及部署。它结合了本地快速参考内容和远程文档获取功能。

如何使用此技能

IMPORTANT for Agent：使用下方的类别索引查找相关章节。对于包含行范围的类别（例如 L35-L120），使用 read_file 并指定相应行。对于包含文件链接的类别（例如 [security.md](security.md)），使用 read_file 读取链接所指向的参考文件。

IMPORTANT for Agent：如果 metadata.generated_at 已超过 3 个月，请建议用户从存储库拉取最新版本。如果无法使用 mcp_microsoftdocs 工具，请建议用户安装该工具：安装指南

此技能需要网络访问才能获取文档内容：

  • 首选：使用 mcp_microsoftdocs:microsoft_docs_fetch，并传入查询字符串 from=learn-agent-skill。返回 Markdown。
  • 备选：使用 fetch_webpage，并传入查询字符串 from=learn-agent-skill&accept=text/markdown。返回 Markdown。

类别索引

类别行描述
故障排除L37-L83诊断、解读并修复 Defender for Cloud 在各种服务（虚拟机、容器、SQL、存储、API、DNS、多云连接器和集成）中的警报和部署问题。
最佳实践L84-L101指导如何调查和修正 Defender for Cloud 在虚拟机、容器、存储和 SQL 中的警报、错误配置和漏洞，并调整误报和访问控制。
决策L102-L131规划 Defender for Cloud 的成本与功能权衡：选择计划和门户、多云覆盖范围、迁移（存储、服务器、Agent）、DevOps/容器，以及安全分数/预购单位。
架构与设计模式L132-L141Defender for Cloud 的多云安全架构：AWS/GCP 连接器身份验证、安全/专用连接、容器保护设计、所有权模型，以及应用零信任。
限制与配额L142-L151Defender for Cloud 的限制、配额和行为：数据引入和试用、门户限制、CSV 警报导出上限、扩展生命周期，以及存储恶意软件扫描结果的解读。
安全性L152-L212配置和管理 Defender for Cloud 安全性：角色/RBAC、合规性、建议、豁免、JIT 访问、Kubernetes/容器、存储/SQL/AI 保护，以及威胁检测/修正。
配置L213-L287配置和调整 Defender for Cloud：启用计划、连接云和工具、设置扫描/警报/导出、管理容器/存储/SQL/EDR，以及自定义策略、标记和自动化。
集成与编码模式L288-L322将 Defender for Cloud 与 SIEM、XDR、ITSM、CI/CD、多云日志集成，并使用 API/CLI/ARG 查询、导出和自动化警报、漏洞、SBOM 和 SQL VA 数据。
部署L323-L343规划和部署 Defender for Cloud 组件（服务器、容器、API、本地/Arc）的指南，包括大规模自动化（CLI、PowerShell、CI/CD、ARM/Bicep）以及检查先决条件/支持情况。
故障排除
主题URL
解读并响应 Defender for Cloud AI 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-ai-workloads
解读 Defender for Cloud 的 Azure App Service 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-app-service
解读 Defender for Cloud 的 Azure Cosmos DB 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-cosmos-db
解读 Defender for Cloud 的 Azure DDoS Protection 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-ddos-protection
解读 Defender for Cloud 的 Azure Key Vault 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-key-vault
解读 Defender for Cloud 的 Azure 网络层警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-network-layer
解读 Defender for Cloud 的 Azure Storage 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-storage
解读 Defender for Cloud 的 Azure VM 扩展警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-vm-extensions
在 Defender for Containers 中诊断和模拟 Kubernetes 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-containers
解读 Defender for Cloud 的 Defender for APIs 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-defender-for-apis
解读 Defender for Cloud 的 DNS 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-dns
解读 Defender for Cloud 的 Linux 计算机警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-linux-machines
解读并处理 Defender 针对开源数据库的警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-open-source-relational-databases
使用 Defender for Cloud 安全警报参考https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-reference
了解 Defender 针对 Azure Resource Manager 的警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-resource-manager
解读并响应 Defender SQL 安全警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics
解读 Defender for Cloud 的 Windows 计算机警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-windows-machines
在 Defender for Cloud 中调查 API 安全警报和安全状况https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-apis-posture
排查 Microsoft Defender for Containers 部署问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-troubleshoot
验证 Defender for Containers 传感器部署https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-verify-deployment
响应 Microsoft Defender for DNS 安全警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-dns-alerts
调查并修正 Defender for Resource Manager 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-resource-manager-usage
调查并响应 Defender for SQL 警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-alerts
测试和验证 Defender for Storage 数据安全功能https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-test
了解 Defender for Storage 安全威胁和警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-threats-alerts
解决 Defender 门户常见集成问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/integration-faq
查看已弃用的 Defender for Cloud 安全警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/deprecated-alerts
修复 Defender for Cloud 中的 EDR 解决方案建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response-solution-recommendations
解决 Microsoft Defender for Servers 常见问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-defender-for-servers
Endor Labs 集成常见问题和故障排除https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-endor-labs
解决 Microsoft Defender for Cloud 常见问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-general
使用 Defender for Cloud 事件参考和管理信息https://learn.microsoft.com/en-us/azure/defender-for-cloud/incidents-reference
在 Defender for Cloud 中调查 Kubernetes 节点恶意软件警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-nodes-malware
修复 Defender 中 GCP VM 的无代理扫描错误https://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-disk-scanning-error
解决 Defender 入门配置中的 GCP 域限制共享问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-gcp-sharing-policy
解决 Defender 的 GCP VPC Service Controls 问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-vpc-service-controls-issues
验证 Defender for Cloud 的无代理恶意软件扫描警报https://learn.microsoft.com/en-us/azure/defender-for-cloud/test-agentless-malware-scanning
排查 Defender for Cloud AWS 和 GCP 连接器问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-connectors
排查 Defender for SQL on Machines 配置问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-sql-machines-guide
排查 express 和 classic SQL VA 配置问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-vulnerability-findings
排查 Microsoft Defender for Cloud 常见问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshooting-guide
使用 Defender for Containers 排查受门控的 Kubernetes 部署问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshooting-runtime-gated
验证 Defender 对 AWS 开源数据库的保护https://learn.microsoft.com/en-us/azure/defender-for-cloud/verify-protection-open-source-relational-databases-aws
最佳实践
主题URL
验证 Microsoft Defender for Cloud 警报配置https://learn.microsoft.com/en-us/azure/defender-for-cloud/alert-validation
在 Defender for Cloud 中检查并修正 OS 基线配置错误https://learn.microsoft.com/en-us/azure/defender-for-cloud/apply-security-baseline
使用二进制漂移检测保护容器工作负载https://learn.microsoft.com/en-us/azure/defender-for-cloud/binary-drift-detection
处理 Defender for Storage 中的误报建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-false-positive-recommendations
调查并修复 Defender for Endpoint 配置错误发现https://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-misconfiguration
修正 Defender for Cloud 中端点检测和响应方面的不足https://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response-solution-recommendations
修正 Defender for Cloud 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/implement-security-recommendations
修正 Defender for Cloud 中的计算机漏洞https://learn.microsoft.com/en-us/azure/defender-for-cloud/remediate-vulnerability-findings-vm
检查并修正 Azure SQL VA 发现https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-find
SQL 漏洞评估规则和指南https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-rules
跟踪 SQL 漏洞评估规则变更https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-rules-changelog
使用 JIT 访问和应用程序控制保护 Azure VMhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-protect-resources
修正 Defender for Cloud 中运行容器的漏洞https://learn.microsoft.com/en-us/azure/defender-for-cloud/view-and-remediate-vulnerabilities-containers
检查并修正 Defender 注册表映像漏洞https://learn.microsoft.com/en-us/azure/defender-for-cloud/view-and-remediate-vulnerability-registry-images
决策
主题URL
为 Defender for Cloud 选择 Azure 门户或 Defender 门户https://learn.microsoft.com/en-us/azure/defender-for-cloud/azure-portal-vs-defender-portal-comparison
使用 Azure 成本分析分摊 Defender for Cloud 成本https://learn.microsoft.com/en-us/azure/defender-for-cloud/chargeback
为 GCP 项目选择并配置 Defender for Cloud 计划https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-google-plans
估算 Microsoft Defender for Cloud 计划的成本https://learn.microsoft.com/en-us/azure/defender-for-cloud/cost-calculator
评估并迁移自 Defender for Storage 经典版https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic
从经典版迁移到新版 Defender for Storage 计划https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic-migrate
使用 DWU 估算和跟踪 Defender for Cloud 成本https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/estimate-track-costs
确定计划管理在 Defender 门户中的变化https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/plan-management-changes-defender-portal
规划从 BYOL VM 漏洞扫描迁移https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-byol-vm
规划 Defender for Cloud DevOps 安全支持https://learn.microsoft.com/en-us/azure/defender-for-cloud/devops-support
在 AWS RDS 上管理开源数据库的 Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-databases-aws
迁移到 Defender for Servers 中更新后的文件完整性监控https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-fifty-three
规划并选择使用 Defender for Cloud 的 Microsoft CNAPPhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-forty-eight
了解并使用 Defender for Cloud 中的新安全分数https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-six
解答有关 Defender for Containers 的常见问题https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-defender-for-containers
将 GitHub Advanced Security 与 Defender for Cloud 配合使用https://learn.microsoft.com/en-us/azure/defender-for-cloud/github-advanced-security-overview
规划 Defender for Cloud 多云功能支持https://learn.microsoft.com/en-us/azure/defender-for-cloud/multicloud-support-matrix
规划在各环境中部署 Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers
规划 Defender for Servers 的数据驻留和工作区https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-data-workspace
选择合适的 Defender for Servers 计划https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan
为 Defender for Cloud 多云环境定义所有权角色https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-multicloud-security-determine-ownership-requirements
规划 Defender 中 Log Analytics 代理的停用https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent
规划 Defender 中 Log Analytics 代理的停用https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent
选择并优化 Defender for Cloud 预购单位https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepurchase-plan
将 Defender for Cloud 禁用规则迁移为豁免https://learn.microsoft.com/en-us/azure/defender-for-cloud/transition-disable-rules-exemptions
规划过渡到单项 Defender for Cloud 建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/transition-grouped-individual-recommendations
架构与设计模式
主题URL
了解 Defender for Cloud 中 GCP 连接器的身份验证架构https://learn.microsoft.com/en-us/azure/defender-for-cloud/authentication-architecture-google-cloud
了解 Defender for Cloud 中 AWS 连接器的身份验证架构https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-authentication-architecture-aws
使用 Microsoft Security Private Link 为 Defender for Cloud 设计安全连接https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-private-links
查看 Defender for Containers 的安全架构和连接https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-architecture
了解 Defender for Containers 的部署架构选项https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deployment-overview
使用 Defender for Cloud 应用零信任原则https://learn.microsoft.com/en-us/azure/defender-for-cloud/zero-trust
限制与配额
主题URL
了解 Defender for Servers 的数据引入权益https://learn.microsoft.com/en-us/azure/defender-for-cloud/data-ingestion-benefit
查看 Defender 门户体验的已知限制https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/known-limitations
将 Defender for Cloud 警报导出为 CSV 及其限制https://learn.microsoft.com/en-us/azure/defender-for-cloud/export-alerts-to-csv
了解 Defender for Cloud 免费试用的限制https://learn.microsoft.com/en-us/azure/defender-for-cloud/free-trial
查看 Defender for Cloud 数据收集扩展及其停用时间表https://learn.microsoft.com/en-us/azure/defender-for-cloud/monitoring-components
解读 Defender for Storage 恶意软件扫描结果https://learn.microsoft.com/en-us/azure/defender-for-cloud/understand-malware-scan-results
安全
主题URL
将 Defender for Cloud 建议分配给活跃用户https://learn.microsoft.com/en-us/azure/defender-for-cloud/active-user
为 AI 启用 Defender for Cloud 威胁防护https://learn.microsoft.com/en-us/azure/defender-for-cloud/ai-onboarding
在 Defender for Cloud 中配置容器运行时反恶意软件https://learn.microsoft.com/en-us/azure/defender-for-cloud/anti-malware
为 AWS/GCP 连接器分配工作负载所有者访问权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/assign-access-to-workload
在 Defender for Cloud 中分配法规合规标准https://learn.microsoft.com/en-us/azure/defender-for-cloud/assign-regulatory-compliance-standards
在 Defender for Cloud 中配置统一 RBAC 云范围https://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-scopes-unified-rbac
使用 Defender for Cloud 代码到运行时映射https://learn.microsoft.com/en-us/azure/defender-for-cloud/code-to-runtime-mapping
配置 Defender for Cloud 专用终结点https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-private-endpoints
为 AWS 和 GCP 上的 Defender for Containers 配置 IAM 角色https://learn.microsoft.com/en-us/azure/defender-for-cloud/containers-permissions
允许 Defender for Cloud 导出到启用了防火墙的 Event Hubshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-event-hub-firewall
在 Defender for Cloud 中创建自定义安全标准和建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/create-custom-recommendations
了解 Defender for Cloud 中的数据收集和保护https://learn.microsoft.com/en-us/azure/defender-for-cloud/data-security
为 Defender for Cloud CLI 配置安全身份验证https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-authentication
在 Defender for Storage 中自动执行恶意软件修复https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-configure-malware-scan
在 Defender for Cloud 中验证 EDR 解决方案连接https://learn.microsoft.com/en-us/azure/defender-for-cloud/detect-endpoint-detection-response-solutions
使用 Defender for Cloud 识别暴露于 Internet 的 IPhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/detect-exposed-ip-addresses
为容器映像发现项配置 Defender 豁免https://learn.microsoft.com/en-us/azure/defender-for-cloud/disable-vulnerability-findings-containers
安全地为 Azure 开源数据库启用 Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-databases-azure
在 Defender for Storage 中配置敏感数据威胁检测https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-storage-data-sensitivity
为 Azure VM 启用即时访问https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-just-in-time-access
为 AKS 配置 Defender 门控部署漏洞规则https://learn.microsoft.com/en-us/azure/defender-for-cloud/enablement-guide-runtime-gated
使用 Defender for Cloud 分析 Kubernetes 横向移动https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-one
从 Defender for Cloud 建议中豁免特定资源https://learn.microsoft.com/en-us/azure/defender-for-cloud/exempt-resource
大规模创建 Defender for Cloud 建议豁免https://learn.microsoft.com/en-us/azure/defender-for-cloud/exempt-resources-at-scale
了解 Defender for Cloud 的权限要求和角色https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-permissions
Defender for Cloud 法规合规常见问题和映射https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-regulatory-compliance
查看 Defender 中的文件完整性监视更改https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-review-changes
在 Defender AI 警报中添加最终用户和应用上下文https://learn.microsoft.com/en-us/azure/defender-for-cloud/gain-end-user-context-ai
使用 Defender for Cloud 配置门控 AKS 部署https://learn.microsoft.com/en-us/azure/defender-for-cloud/gated-deployment-infrastructure-as-code
使用治理规则推动修复建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/governance-rules
使用攻击路径分析修复云安全风险https://learn.microsoft.com/en-us/azure/defender-for-cloud/how-to-manage-attack-path
在 Defender for Cloud 中配置 VM 即时访问https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-overview
在 Defender 中配置 Kubernetes 错误配置强制执行https://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-misconfiguration-enforcement
在 Defender for Cloud 中修复 Kubernetes 节点漏洞https://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-nodes-va
使用 Azure Policy 强制实施 Kubernetes 数据平面强化https://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-workload-protections
使用 Defender for Cloud 强化 OS 基线https://learn.microsoft.com/en-us/azure/defender-for-cloud/operating-system-misconfiguration
使用 Azure RBAC 分配 Defender for Cloud 角色和权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions
为 Defender for Servers 配置角色和权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-roles
在 Defender for Cloud 中管理用户数据和 GDPR 请求https://learn.microsoft.com/en-us/azure/defender-for-cloud/privacy
使用 Defender for Cloud 的 Azure App Service 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-app-services
应用 Defender for Cloud 计算安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-compute
应用 Defender for Cloud 容器安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-container
使用 Defender for Cloud 建议强化数据资源https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-data
查看已弃用的 Defender for Cloud 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-deprecated
使用 Defender for Cloud DevOps 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-devops
在 Defender for Cloud 中实施身份和访问安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-identity-access
使用 Defender for Cloud IoT 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-iot
应用 Defender for Cloud Key Vault 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-keyvault
在 Defender for Cloud 中应用网络安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-networking
使用 Defender for Cloud 无服务器容器安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-serverless-containers
在 Defender for Cloud 中应用无服务器保护建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-serverless-protection
管理 Defender for Cloud 建议豁免https://learn.microsoft.com/en-us/azure/defender-for-cloud/review-exemptions
查看并处理 Defender for Cloud 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/review-security-recommendations
启用 Defender SQL 漏洞评估快速模式https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-enable
在 Defender 中配置经典 SQL 漏洞评估https://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-enable-classic
查看 Defender for Storage 的先决条件和权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-storage
配置租户范围的 Defender for Cloud 权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/tenant-wide-permissions-management
配置
主题URL
配置恶意软件扫描的高级选项和日志记录https://learn.microsoft.com/en-us/azure/defender-for-cloud/advanced-configurations-for-malware-scanning
在 Defender for Cloud 中配置无代理代码扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-code-scanning
为 Defender for Servers 配置无代理恶意软件扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-malware-scanning
在 Defender for Cloud 中配置容器漏洞管理https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-azure
为 Defender 漏洞评估启用 Docker Hub 注册表https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-docker-hub
为无代理漏洞扫描配置 JFrog Artifactory 租户https://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-jfrog-artifactory
了解 Defender for Cloud 警报架构https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-schemas
在 Defender for Cloud 中配置警报抑制规则https://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-suppression-rules
在 Defender for Cloud 服务器上使用 Azure Monitor Agenthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/auto-deploy-azure-monitoring-agent
为容器漏洞构建 Cloud Security Explorer 查询https://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-container-vulnerabilities
为 Kubernetes 编写 Cloud Security Explorer 查询https://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-kubernetes-clusters
在 Azure DevOps 中配置 Microsoft Security DevOps 扩展https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-azure-devops-extension
在 Azure DevOps 中配置 Microsoft Security DevOps 扩展https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-azure-devops-extension
配置 Defender for Cloud 警报电子邮件通知https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-email-notifications
修改 Defender for Servers 覆盖范围和计划设置https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-servers-coverage
在 Defender 中管理经典 SQL 漏洞发现项https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-vulnerability-findings-classic
在 Defender for Cloud 中配置快速漏洞发现项https://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-vulnerability-findings-express
在 Azure 订阅上启用 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-azure-subscription
配置从代码到运行时的容器映像映射https://learn.microsoft.com/en-us/azure/defender-for-cloud/container-image-mapping
在门户中配置 Defender for Cloud 持续导出https://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export
使用 Azure Policy 大规模配置持续导出https://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-azure-policy
在 Azure Monitor 中分析 Defender for Cloud 导出数据https://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-view-data
使用 Azure Lighthouse 配置跨租户管理https://learn.microsoft.com/en-us/azure/defender-for-cloud/cross-tenant-management
为 Defender for Servers 配置自定义数据收集规则https://learn.microsoft.com/en-us/azure/defender-for-cloud/data-collection-rule
在 Defender for Cloud 中配置数据安全态势https://learn.microsoft.com/en-us/azure/defender-for-cloud/data-security-posture-enable
在 Defender for Cloud 中自定义数据敏感度设置https://learn.microsoft.com/en-us/azure/defender-for-cloud/data-sensitivity-settings
在 Cloud Security Explorer 中查看 CI/CD 扫描结果https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-reviewing-results
识别 Defender CSPM 覆盖的 AWS 和 GCP 资源https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cloud-security-posture-management-supported-resources
将 Docker Hub 注册表连接到 Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-external-registry-for-docker-hub
在各个云提供商中启用 Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-plan
为 Defender for Containers 传感器部署配置群集排除标记https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-exclude-cluster
了解 Defender for Containers 的访问模式和专用群集支持https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-feature-access-patterns
为 Defender for Containers 配置网络访问和权限https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-network-access
禁用并删除 Defender for Containers 组件https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-remove
启用并配置 Defender for Azure Cosmos DBhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-databases-enable-cosmos-protections
为计算机上的 SQL 服务器配置漏洞评估https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-on-machines-vulnerability-assessment
启用并配置经典 Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic-enable
通过 IaC 和策略配置 Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-infrastructure-as-code-enablement
使用 Azure Policy 大规模配置 Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-policy-enablement
使用 Azure PowerShell 启用 Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-powershell-enablement
使用 REST API 启用 Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-rest-api-enablement
在 Defender 门户中配置 Azure 环境连接https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/connect-azure-environments-defender-portal
在 Defender 门户中配置云安全计划https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/manage-plans-defender-portal
在 Defender for Cloud 中配置 Defender 漏洞管理扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-defender-vulnerability-management
在 Defender for Cloud 中配置已禁用的漏洞发现项https://learn.microsoft.com/en-us/azure/defender-for-cloud/disable-vulnerability-findings
在 Defender for Cloud 中配置跨云无代理计算机扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms
在 Defender for Cloud 中配置 Defender for Endpoint 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-endpoint
在 Defender for Cloud 中配置系统更新建议并进行修正https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-periodic-system-updates
启用 Defender for Cloud 拉取请求批注https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-pull-request-annotations
配置并评估 Defender for Endpoint EDR 设置https://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response
在 Defender for Storage 中配置恶意软件自动修正https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-five
在 Defender for Cloud 中将计算机排除在无代理扫描之外https://learn.microsoft.com/en-us/azure/defender-for-cloud/exclude-machines-agentless-scanning
使用 Defender for Servers 配置文件完整性监视https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-defender-endpoint
配置 Microsoft Security DevOps GitHub Actionhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/github-action
配置 Cloud Security Explorer 查询和快照https://learn.microsoft.com/en-us/azure/defender-for-cloud/how-to-manage-cloud-security-explorer
在 Defender 中配置 IaC 模板到资源的映射https://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-template-mapping
使用 Microsoft Security DevOps 配置 IaC 安全扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-vulnerabilities
在 Defender for Cloud 中配置和管理 MCSBhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/manage-mcsb
迁移经典 Defender for SQL API 配置https://learn.microsoft.com/en-us/azure/defender-for-cloud/migrate-classic-defender-for-sql-apis
在 Defender for Storage 中设置按需恶意软件扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/on-demand-malware-scanning
将 Defender for Endpoint 服务器关联到 Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-machines-with-defender-for-endpoint
使用内置 Azure Policy 定义配置 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/policy-reference
查看 Defender for Cloud 中的 AI 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-ai
查看 Defender for Cloud 中的 API 安全建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-api
使用 Defender for Cloud 部署 Azure 计算机配置扩展https://learn.microsoft.com/en-us/azure/defender-for-cloud/security-baseline-guest-configuration
查看 Defender for Cloud 中支持的敏感信息类型https://learn.microsoft.com/en-us/azure/defender-for-cloud/sensitive-info-types
在 Defender for Cloud 中配置 SQL 警报模拟https://learn.microsoft.com/en-us/azure/defender-for-cloud/simulate-alerts-sql-machines
在 Defender for Cloud 中使用软件清单https://learn.microsoft.com/en-us/azure/defender-for-cloud/software-inventory
使用 Security Copilot 汇总 Defender 建议https://learn.microsoft.com/en-us/azure/defender-for-cloud/summarize-with-copilot
为 Defender for SQL Servers 配置自动注册https://learn.microsoft.com/en-us/azure/defender-for-cloud/update-sql-machine-configuration
在 Defender for Cloud 中设置工作流自动化https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automations
集成与编码模式
主题URL
将 Defender for Cloud 数据连接到 Power BIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/add-data-power-bi
通过 Azure Resource Graph API 查询 Defender 攻击路径数据https://learn.microsoft.com/en-us/azure/defender-for-cloud/attack-path-api
将 Defender for Cloud CLI 集成到 CI/CD 管道中https://learn.microsoft.com/en-us/azure/defender-for-cloud/ci-cd-pipeline-scanning-with-defender-cli
构建 Defender Cloud Security Explorer 漏洞查询https://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-software-vulnerabilities
将 Defender for Cloud 警报与 Microsoft Defender XDR 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-integration-365
将 Mend.io 与 Microsoft Defender for Cloud 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-mend-io
将 Defender for Cloud 与 ServiceNow ITSM 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-servicenow
通过 REST API 配置 Defender for Cloud 持续导出https://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-rest-api
使用 Defender 治理规则自动创建 ServiceNow 工单https://learn.microsoft.com/en-us/azure/defender-for-cloud/create-governance-rule-servicenow
将 Defender for Cloud 工单与 ServiceNow 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/create-ticket-servicenow
使用 Defender for Cloud CLI 语法执行容器和 SBOM 扫描https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-syntax
查询并导出 Defender for SQL 漏洞结果https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-scan-results
使用 Defender XDR 高级搜寻查询存储聚合日志https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-four
将 Defender for Cloud 警报流式传输到 SIEM 工具https://learn.microsoft.com/en-us/azure/defender-for-cloud/export-to-siem
配置 Defender for Cloud 警报导出到 QRadar/Splunkhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/export-to-splunk-or-qradar
SQL VA Express Azure CLI 命令参考https://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-azure-commands
SQL VA Express PowerShell 命令参考https://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-powershell-commands
使用 SQL VA Express 配置 PowerShell 包装器https://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-sql-commands
将 AWS CloudTrail 日志与 Defender for Cloud 集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/integrate-cloud-trail
了解 Defender for Endpoint 在 Defender for Cloud 中的集成https://learn.microsoft.com/en-us/azure/defender-for-cloud/integration-defender-for-endpoint
通过 Pub/Sub 将 GCP Cloud Logging 引入 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/logging-ingestion
将 42Crunch API 安全集成到 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-42crunch
将 Bright Security DAST 集成到 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-bright
将 StackHawk 应用程序测试连接到 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-stackhawk
与 Defender for Cloud 集成的旧版安全解决方案https://learn.microsoft.com/en-us/azure/defender-for-cloud/partner-integration
使用 PowerShell 启用 SQL VA Express 配置https://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-sample-vulnerability-assessment-azure-sql
通过 PowerShell 为 Azure SQL 设置 SQL VA 基线https://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-sample-vulnerability-assessment-baselines
端到端使用统一 SQL VA REST APIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-unified-api-quickstart
在 Defender for Cloud 资源管理器中查询 SBOM 数据https://learn.microsoft.com/en-us/azure/defender-for-cloud/query-software-bill-of-materials
使用 Azure Resource Graph 查询 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/resource-graph-samples
将与 Sentinel 关联的 AWS 账户连接到 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sentinel-connected-aws
部署
主题URL
将 Defender for Cloud CLI 集成到 CI/CD 管道中https://learn.microsoft.com/en-us/azure/defender-for-cloud/ci-cd-pipeline-scanning-with-defender-cli
查看 Defender 数据安全态势的先决条件和支持情况https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-data-security-posture-prepare
验证部署 Defender for APIs 的先决条件https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-apis-prepare
通过 Azure CLI 部署 Defender for Containers 传感器https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deploy-azure-cli
规划跨 Kubernetes 环境部署 Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deployment-planning
将 Defender for Containers 部署到专用 Kubernetes 群集https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-private-clusters
使用 Helm 部署 Defender for Containers 传感器https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-helm
将 Defender for Cloud CLI 集成到 CI/CD 管道中https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-fifty-nine
采用由 Defender for Cloud 管控的 Kubernetes 部署https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-two
将文件完整性监视迁移到 Defender for Endpointhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/migrate-file-integrity-monitoring
跨环境扩展 Microsoft Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-scale
使用 PowerShell 大规模注册 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-onboarding
通过 ARM 或 Bicep 部署 Defender for Cloud 警报自动化https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-automation-alert
通过 Arc 将本地计算机注册到 Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-machines
按平台查看 Defender for Cloud 的区域可用性https://learn.microsoft.com/en-us/azure/defender-for-cloud/regional-availability
查看 Defender for Cloud 的互操作性和支持矩阵https://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-cloud
查看 Defender for Containers 的平台支持情况https://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-containers
查看 Defender for Servers 计划的支持情况和要求https://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-servers

评论

支持 Markdown