Azure_compliance/control/check

Ensure That ‘Subscription Entering AAD Directory’ and ‘Subscription Leaving AAD Directory’ Is Set To ‘Permit No One’
Description: Restricting Subscription entering AAD directory and Subscription leaving AAD directory to Permit no one prevents unauthorized movement of Azur...
Tue, 23 Dec, 2025 at 2:34 PM
Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
Description: Microsoft Defender for Open-Source Relational Databases is a security feature within Microsoft Defender for Cloud that provides advanced threa...
Fri, 26 Dec, 2025 at 3:32 AM
Ensure That Microsoft Defender for Azure Cosmos DB Is Set To 'On'
Description: Microsoft Defender for Azure Cosmos DB adds extra security to your Cosmos DB databases by detecting threats, monitoring for suspicious activit...
Fri, 26 Dec, 2025 at 3:43 AM
Ensure That Microsoft Defender for DNS Is Set To 'On'
Description: Microsoft Defender for DNS scans all network traffic exiting from within a subscription. Rationale: DNS lookups within a subscription are s...
Mon, 21 Aug, 2023 at 6:57 AM
Ensure That Microsoft Defender for Resource Manager Is Set To 'On'
Description: Microsoft Defender for Resource Manager is part of Microsoft Defender for Cloud and provides enhanced security monitoring and threat protectio...
Fri, 26 Dec, 2025 at 4:19 AM
Ensure that Microsoft Defender Recommendation for 'Apply system updates' status is 'Completed' (Manual)
Description: This control checks the Microsoft Defender for Cloud recommendation called “Apply system updates.” If this recommendation is not shown, it mea...
Fri, 26 Dec, 2025 at 4:31 AM
Ensure that Auto provisioning of 'Log Analytics agent for Azure VMs' is Set to 'On' (Automated) .
Description: Auto-provisioning installs the Log Analytics agent automatically on Azure VMs to ensure they send security and monitoring data to Microsoft De...
Fri, 26 Dec, 2025 at 4:38 AM
Ensure that Auto provisioning of 'Vulnerability assessment for machines' is Set to 'On' .
Description: Automatic Provisioning of Vulnerability Assessment (VA) for Machines enables Microsoft Defender for Cloud to automatically deploy vulnerabilit...
Fri, 26 Dec, 2025 at 4:47 AM
Ensure that Auto provisioning of 'Microsoft Defender for Containers components' is Set to 'On'
Description: Auto provisioning of Microsoft Defender for Containers components ensures that the required security extensions are installed. such as the Azu...
Fri, 26 Dec, 2025 at 4:51 AM
Ensure that Microsoft Defender for Cloud Apps integration with Microsoft Defender for Cloud is Selected
Description: Defender for Cloud Apps is automatically integrated when Defender CSPM is turned on. There is no separate setting to enable. Turning on Defend...
Sat, 27 Dec, 2025 at 11:17 AM