Forum Discussion

shocko's avatar
shocko
Iron Contributor
Apr 23, 2022
Solved

File Integrity Monitoring

I have a large estate of Windows Enterprise 10 21H2 machines on-prem (not Azure VMs) running Windows Defender AV with endpoint protection enabled. I wish to monitor certain file for changes. I used d...
  • Jonhed's avatar
    Jonhed
    May 12, 2022

    This feature requires Defender for Servers Plan 2.
    Defender for Servers includes a Defender for Endpoint license, but also includes several other unrelated features, such as this File Integrity Monitoring.

    Defender for Servers can be used with Azure Arc on machines outside of Azure,
    but this does not support Windows Clients, so I don't think this works in your case.
    https://docs.microsoft.com/en-us/azure/azure-arc/servers/prerequisites#supported-environments (Even if you could use Defender for Servers, this would be very expensive since you would be billed per machines)

Jonhed's avatar
Jonhed
Iron Contributor
May 12, 2022

This feature requires Defender for Servers Plan 2.
Defender for Servers includes a Defender for Endpoint license, but also includes several other unrelated features, such as this File Integrity Monitoring.

Defender for Servers can be used with Azure Arc on machines outside of Azure,
but this does not support Windows Clients, so I don't think this works in your case.
https://docs.microsoft.com/en-us/azure/azure-arc/servers/prerequisites#supported-environments (Even if you could use Defender for Servers, this would be very expensive since you would be billed per machines)

  • shocko's avatar
    shocko
    Iron Contributor
    Jul 11, 2022
    Thanks! I think I will have to look at a 3rd party solution here.

Resources