threat alert in azure vm using azure security center

how can i get an alert for threat detection on individual azure vm using azure security center. like if any brute force attack is detected by azure security center, it generates an email alert.

azure monitor

microsoft defender for cloud

Stanislav_Zhelyazkov
Jan 30, 2019
Hi,

I am not sure what exactly you want to do but Azure Security Center Alerts are also logged in Activity log. More information here:

https://docs.microsoft.com/en-us/azure/security-center/security-center-managing-and-responding-alerts#managing-security-alerts

in note:

Security alerts generated by Security Center will also appear under Azure Activity Log. For more information about how to access Azure Activity Log, read View activity logs to audit actions on resources.

If you want to send the alerts to an e-mail create Azure Activity log alert and attach it to Action group that has the e-mail signal.

Stanislav_Zhelyazkov

MVP

Jan 30, 2019

Hi,

I am not sure what exactly you want to do but Azure Security Center Alerts are also logged in Activity log. More information here:

https://docs.microsoft.com/en-us/azure/security-center/security-center-managing-and-responding-alerts#managing-security-alerts

in note:

Security alerts generated by Security Center will also appear under Azure Activity Log. For more information about how to access Azure Activity Log, read View activity logs to audit actions on resources.

If you want to send the alerts to an e-mail create Azure Activity log alert and attach it to Action group that has the e-mail signal.

Deepak_kumar

Copper Contributor

Jan 30, 2019

I'm trying to get email alert for target vm, if any serious threat is detected on it. In security policy we will get notification for any threat on any vm in subscription.

Stanislav_Zhelyazkov
MVP
Jan 30, 2019
Than the above method is the correct method.

Forum Discussion

threat alert in azure vm using azure security center

Resources