Cloud & Hybrid Workload Protection using Azure Defender
summary
Azure Defender is the paid layer on Azure Security Center that provides cloud and hybrid workload protection with a 30‑day trial and per‑resource pricing, adding Azure Arc‑based onboarding for non‑Azure servers, SQL, and Kubernetes; agent‑based onboarding and AWS/GCP connectors pull AWS Security Hub signals into Security Center. Runtime and registry protections include Qualys‑powered ACR vulnerability scanning, just-in-time access for VM management ports, file integrity monitoring, adaptive network hardening, Docker host hardening (CIS), and automated remediation workflows.
AI-written summary · about
chapters (20)
- 0:00Introduction and overview
- 1:27Threat landscape and challenges
- 4:43Microsoft threat protection suite
- 6:09Azure Security Center basics
- 9:19Azure Defender pricing and modes
- 13:35Azure Defender hybrid support
- 17:50Cost and investment value
- 19:16Protecting servers and VMs
- 23:10File integrity and network hardening
- 26:48Docker and Kubernetes protection
- 27:08Database protection overview
- 31:24Vulnerability assessment in SQL
- 31:45Container security capabilities
- 33:53Azure Pass resources protection
- 37:01Alerts and incident correlation
- 41:23Security incidents explained
- 43:07Hybrid demo setup introduction
- 44:12Adding non-Azure VM with Azure Arc
- 50:19Integrating AWS with Azure Defender
- 53:14Q&A and closing remarks
related talks
43mDefending the Cloud: Securing Your Microsoft Data Workloads
28mSecuring Azure Cosmos DB using Microsoft Defender
28mSecuring Azure Cosmos DB using Microsoft Defender
23mBuild a Defense in Depth Security Posture in Azure
46mRemediating Cloud Risks with Microsoft Copilot for Security
17mHarnessing AI for Autonomous Threat Defense in Multi-Cloud Security
56mEnter the Matrix: Securing Azure’s Assets
01h 09mCloud Safeguarding: View from Cloud Providers