Azure_compliance/control/check

Ensure That ‘Subscription Entering AAD Directory’ and ‘Subscription Leaving AAD Directory’ Is Set To ‘Permit No One’
Description: Users who are set as subscription owners are able to make administrative changes tothe subscriptions and move them into and out of Azure Activ...
Mon, 21 Aug, 2023 at 6:38 AM
Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
Description: Turning on Microsoft Defender for Open-source relational databases enables threat detection for Open-source relational databases, providing th...
Mon, 21 Aug, 2023 at 6:46 AM
Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
Description: Microsoft Defender for Azure Cosmos DB scans all incoming network requests for threats to your Azure Cosmos DB resources. Rationale: In sca...
Mon, 21 Aug, 2023 at 6:50 AM
Ensure That Microsoft Defender for DNS Is Set To 'On'
Description: Microsoft Defender for DNS scans all network traffic exiting from within a subscription. Rationale: DNS lookups within a subscription are s...
Mon, 21 Aug, 2023 at 6:57 AM
Ensure That Microsoft Defender for Resource Manager Is Set To 'On'
Description: Microsoft Defender for Resource Manager scans incoming administrative requests to change your infrastructure from both CLI and the Azure porta...
Mon, 21 Aug, 2023 at 7:03 AM
Ensure that Microsoft Defender Recommendation for 'Apply system updates' status is 'Completed' (Manual)
Description: Enable automatic provisioning of the monitoring agent to collect security data. Rationale: When Log Analytics agent for Azure VMs is turned...
Mon, 21 Aug, 2023 at 7:05 AM
Ensure that Auto provisioning of 'Log Analytics agent for Azure VMs' is Set to 'On' (Automated) .
Description: This policy ensures that the auto provisioning of the Log Analytics agent for Azure VMs is set to "On". This means that the Log Analy...
Mon, 21 Aug, 2023 at 7:06 AM
Ensure that Auto provisioning of 'Vulnerability assessment for machines' is Set to 'On' .
Description: Enable automatic provisioning of vulnerability assessment for machines on both Azure and hybrid (Arc enabled) machines. Rationale: Vulnerab...
Mon, 21 Aug, 2023 at 7:08 AM
Ensure that Auto provisioning of 'Microsoft Defender for Containers components' is Set to 'On'
Description: Enable automatic provisioning of the Microsoft Defender for Containers components. Rationale: As with any compute resource, Container envir...
Mon, 21 Aug, 2023 at 7:11 AM
Ensure that Microsoft Defender for Cloud Apps integration with Microsoft Defender for Cloud is Selected
Description: This integration setting enables Microsoft Defender for Cloud Apps (formerly 'Microsoft Cloud App Security' or 'MCAS' - see ad...
Tue, 22 Aug, 2023 at 4:36 AM