Validating Alerts on Microsoft Defender for SQL on machines

For those looking to simulate an alert with the new Azure Monitor Agent, look for a Microsoft.SQL.ADS.DefenderForSQL.exe executable in the C:\Packages\Plugins\Microsoft.Azure.AzureDefenderForSQL.AdvancedThreatProtection.Windows\<version>\bin folder. Replace <version> by the current Defender for SQL extension version.

Then, execute Microsoft.SQL.ADS.DefenderForSQL.exe simulate --help for the list of alert simulation options. For example:

Microsoft.SQL.ADS.DefenderForSQL.exe simulate -Attack BruteForce