Azure Security Center
Автор: Microsoft
Provides the ability to explore security related data and helps identify security breaches.
Security and Audit is now integrated into Azure Security Center. Azure Security Center is a security management tool that allows you to gain insight into your security state across hybrid cloud workloads, reduce your exposure to attacks, and respond to detected threats quickly. You can try Azure Security Center for free for the first 30 days. Afterwards, you will be billed per node regardless of the workspace pricing tier.
GAIN INSTANT SECURITY INSIGHTS ACROSS ALL YOUR IT ENVIRONMENTS
Manage security across all your hybrid cloud workloads—on-premises, Azure, and other cloud platforms—from Azure Security Center. Install an agent onto your cloud and on-premises virtual machines to monitor your security state, and identify issues such as systems with missing security updates, missing or outdated antimalware, and insecure OS configurations that can make them vulnerable to attack. It also provides insight into the security state of your network , storage and data, applications and access controls. Configure security policies per subscription to ensure new or current virtual machines maintain your security settings.
ENABLE PROTECTIONS TO REDUCE YOUR EXPOSURE TO ATTACKS
Security Center gives you several controls to help you reduce your exposure to attacks. Adaptive Applications Controls use machine learning to recommend applications that should be whitelisted to help you block malware and other unwanted applications from running. Just-in-Time VM Access allows you to protect against threats such as brute force attacks by reducing access to virtual machine management ports only when it is needed.
RESPOND QUICKLY TO DETECTED THREATS
By leveraging Microsoft's vast global threat intelligence and applying behavioral analytics, Security Center can detect successful or attempted attacks. Once a threat has been detected, for example a malicious process being executed or an attempt by the attacker to move laterally within your environment, you can explore this threat in the Investigation Path. It’s an interactive and visual way to explore all the related entities of an attack and assess the scope and impact of an attack. You can run a Playbook built on Azure Logic Apps to quickly deploy solve against the attack.