Microsoft Defender for Cloud

Book Description

The definitive practical guide to Microsoft Defender for Cloud Fully covers new components and multi-cloud enhancements!

Microsoft Defender for Cloud offers comprehensive tools for hardening resources, tracking security posture, protecting against attacks, and streamlining security management – all in one natively integrated toolset. Now, leading Microsoft security experts Yuri Diogenes and Tom Janetscheck help you apply its robust protection, detection, and response capabilities throughout your operations, protecting workloads running on all your cloud, hybrid, and on-premises platforms.

This guide shows how to make the most of new components, enhancements, and deployment scenarios, as you address today’s latest threat vectors. Sharing best practices, expert tips, and optimizations only available from Microsoft’s Defender for Cloud team, the authors walk through improving everything from policies and governance to incident response and risk management. Whatever your role or experience, they’ll help you address new security challenges far more effectively — and save hours, days, or even weeks.

Two of Microsoft’s leading cloud security experts show how to:

Assess new threat landscapes, the MITRE ATT&CK framework, and the implications of “assume-breach” Explore Defender for Cloud architecture, use cases, and adoption considerations including multicloud with AWS and GCP Plan for effective governance, successful onboarding, and maximum value Fully visualize complex cloud estates and systematically reduce their attack surfaces Prioritize risks with Secure Score, and leverage at-scale tools to build secure cloud-native apps Establish consistent policy enforcement to avoid drift Use advanced analytics and machine learning to identify attacks based on signals from all cloud workloads Enhance security posture by integrating with the Microsoft Sentinel SIEM/SOAR, Microsoft Purview, and Microsoft Defender for Endpoint Leverage just-in-time VM access and other enhanced security capabilities About This Book

For architects, designers, implementers, SecOps professionals, developers, and security specialists working in Microsoft Azure environments For all IT professionals and decision-makers concerned with securing modern hybrid/multicloud environments, cloud-native apps, and PaaS services

中文：

书名：微软云卫士

Microsoft Defender for Cloud的权威实用指南全面涵盖了新组件和多云增强功能!

Microsoft Defender for Cloud在一个本地集成的工具集中提供了用于强化资源、跟踪安全态势、防御攻击和简化安全管理的综合工具。现在，领先的Microsoft安全专家Yuri Diogenes和Tom Janetscheck可帮助您在整个运营过程中应用其强大的保护，检测和响应功能，从而保护在所有云，混合和本地平台上运行的工作负载。

本指南展示了如何充分利用新的组件、增强功能和部署方案，以应对当今最新的威胁媒介。分享最佳实践、专家技巧和优化，只有Microsoft的Defender for Cloud团队才能提供，作者逐步完成了从策略和治理到事件响应和风险管理的所有改进。无论您的角色或经验如何，它们都将帮助您更有效地应对新的安全挑战，并节省数小时，数天甚至数周的时间。

两名微软领先的云安全专家展示了如何:

评估新的威胁环境、MITRE ATT & CK框架以及 “假设-违反” 的含义，探索云架构、用例和采用考虑因素的防御者，包括具有AWS和GCP计划的multicloud，以实现有效治理、成功入职、最大价值充分可视化复杂的云资产，并系统地降低其攻击面优先考虑安全得分的风险，并利用大规模工具来构建安全的云原生应用建立一致的策略执行以避免漂移使用高级分析和机器学习基于来自所有云工作负载的信号来识别攻击通过与Microsoft Sentinel SIEM/SOAR，Microsoft Purview，和Microsoft Defender for Endpoint利用实时虚拟机访问和其他增强的安全功能关于本书

对于在Microsoft Azure环境中工作的架构师，设计师，实施者，SecOps专业人员，开发人员和安全专家，为所有与保护现代混合/多云环境，云原生应用程序和PaaS服务相关的IT专业人员和决策者