Benchmark: 2.1 Defender Plans
Overview
This subsection is dedicated to providing guidance on Microsoft Defender for Cloud product plans. This guidance is intended to ensure that - at a minimum - the protective measures offered by these plans are being considered. Organizations may find that they have existing products or services that provide the same utility as some Microsoft Defender for Cloud products. Security and Administrative personnel need to make the determination on their organization's behalf regarding which - if any - of these recommendations are relevant to their organization's needs. In consideration of the above, and because of the potential for increased cost and complexity, please be aware that all Defender Plan recommendations are profiled as "Level 2" recommendations.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-azure-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select 2.1 Defender Plans.
Run this benchmark in your terminal:
powerpipe benchmark run azure_compliance.benchmark.cis_v150_2_1
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run azure_compliance.benchmark.cis_v150_2_1 --share
Controls
- 2.1.1 Ensure That Microsoft Defender for Servers Is Set to 'On'
- 2.1.2 Ensure That Microsoft Defender for App Services Is Set To 'On'
- 2.1.3 Ensure That Microsoft Defender for Databases Is Set To 'On'
- 2.1.4 Ensure That Microsoft Defender for Azure SQL Databases Is Set To 'On'
- 2.1.5 Ensure That Microsoft Defender for SQL Servers on Machines Is Set To 'On'
- 2.1.6 Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'
- 2.1.7 Ensure That Microsoft Defender for Storage Is Set To 'On'
- 2.1.8 Ensure That Microsoft Defender for Containers Is Set To 'On'
- 2.1.9 Ensure That Microsoft Defender for Cosmos DB Is Set To 'On'
- 2.1.10 Ensure That Microsoft Defender for Key Vault Is Set To 'On'
- 2.1.11 Ensure That Microsoft Defender for DNS Is Set To 'On'
- 2.1.12 Ensure That Microsoft Defender for IoT Is Set To 'On'
- 2.1.13 Ensure That Microsoft Defender for Resource Manager Is Set To 'On'