Microsoft Defender Vulnerability Management

 

Microsoft Defender Vulnerability Management Dashboard:

• Exposure score and trends
  
• weakness, likelihood, device value, alerts.
  
• Recommendations
• top security recommendations, high exposure score, software update and upgrade, or uninstalls, impact, or configuration change.
  
• Alerts and threat insight.
• Ticketing with Service Now or Microsoft Endpoint Manager.
• Exception scoping, justification, and expiry.
• Track the progress of the remediation requests and review exceptions.
• Show Top Vulnerable Software.
• Supports add-ons such as asset inventory, block vulnerable versions of apps, monitor for compliance (security baseline assessment).  

Links:

• aka.ms/MDVM
  

Getting Started with Microsoft Defender for Cloud

Microsoft Defender for Cloud provides you with a Secure Score, which measures the configuration of the resources in your Azure subscription against the Azure Security Benchmark.

Defender for Cloud can also help you associate these various policies to compare your deployment and configuration.

This video provides a walk through of enabling Defender for Cloud for the first time and associating a compliance policy that is used to measure the security of the subscription.

Links:

• Microsoft Defender for Cloud documentation
  

Managing Discovery of Unmanaged Endpoints

This video shows you how to discover unmanaged devices by using Microsoft Defender for Endpoint.

It helps you to discover, assess, and remediate unmanaged endpoints and network devices. Eventually it gives you a clearer path toward a better security posture.

It is using a distributed sensor architecture to discover endpoints. It requires no effort ; no deployment; no network configuration/maintenance. And it can provides immediate value with almost zero effort. It can use both  agentless and remote authenticated network scan approach. 

Next, assessment and on-boarding unmanaged endpoints.

Links:

• http://aka.ms/devicediscovery
• http://aka.ms/netdiscovery