Microsoft Defender for SQL: Advanced Threat Protection
summary
Microsoft Defender for SQL claims it detects SQL injection payloads and other anomalous access patterns by continuously analyzing logs, and it raises alerts with full query text and remediation links (high-severity email and portal notifications). It runs vulnerability assessments that list fixable issues, lets teams baseline findings, and shows a security score with recommendations like TDE and MFA. It covers Azure SQL Database, Managed Instance, Synapse, SQL Server on VMs and Arc, and demoed an injected "' OR 1=1 --" that returned rows and produced an immediate actionable alert.
AI-written summary · about
chapters (8)
- 0:00Introduction to cloud security
- 1:36Microsoft Defender overview
- 2:26Defense in-depth strategy
- 4:39Vulnerability assessment
- 6:19Advanced threat protection
- 10:11SQL injection demonstration
- 13:57Managing security alerts
- 17:26Conclusion and resources
related talks
52mDetecting Malicious Activity: Unveiling the Secrets of MS-SQL Logging
28mSecuring Azure Cosmos DB using Microsoft Defender
28mSecuring Azure Cosmos DB using Microsoft Defender
48mProtecting the confidentiality and integrity of your high value data with Azure SQL and SQL Server 2
58mMicrosoft Security Copilot - your new best friend!
32mDesigning secure Azure SQL Database solutions
46mWhat's new in Microsoft Threat Protection
21mWhat you can do to protect your SQL Server and why it matters