Forum Discussion
tom_peters
Jan 12, 2022Copper Contributor
Microsoft Defender for Storage
Hi there, we want to use Defender for Storage but in a way that each of our product teams can enable this for their storage account. This is possible as far as I know but the alerts will just be acc...
StanislavBelov
Microsoft
Jan 16, 2022If you use tags in your environment, you can use the 'Tags' filter in the Security Alerts view to only see alerts related to certain project/app/owner/whatever. As an alternative you can create your own custom 'response' feature using Workflow Automation. Check out our GitHub repo for ideas: https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Workflow%20automation
Please also keep in mind that Defender for Cloud is not a SIEM solution, so it does not have advanced capabilities like Sentinel or any 3rd party SIEM.
Please also keep in mind that Defender for Cloud is not a SIEM solution, so it does not have advanced capabilities like Sentinel or any 3rd party SIEM.