Event banner

Microsoft Defender for Cloud AMA

Event Ended
Thursday, Mar 30, 2023, 09:00 AM PDT
In-Person

Event details

An AMA is a live text-based online event similar to an "Ask Me Anything," on Reddit. This AMA gives you the opportunity to connect with members of the Defender for Cloud product group who will be on ...
Trevor_Rusher
Updated Mar 30, 2023
microsoft defender for cloud
JentPaul's avatar
JentPaul
Copper Contributor
Mar 30, 2023
I'm testing the new integration (pipeline) with the Azure Monitor Agent. The accompanying Azure Policy initiative is in preview as well. I noticed that Windows Server 2022 is not in scope of the policy definition to deploy the Azure Security Agent extension. Is that functionality built-in or an error in the policy definition?
Tom_Janetscheck's avatar
Tom_Janetscheck
Icon for Microsoft rankMicrosoft
Mar 30, 2023
Hi Jent, today, the policy does not yet contain Windows Server 2022 as an operating system in scope. However, you can use the builtin policy definition as a template for a custom one and add additional operating systems (or remove the OS scoping part).
  • JentPaul's avatar
    JentPaul
    Copper Contributor
    Mar 31, 2023

    Follow up question Tom_Janetscheck, when the new AMA, ASA, DCR pipeline is complete, I guess I can use the same test alert validation as in https://learn.microsoft.com/en-us/azure/defender-for-cloud/alert-validation#simulate-alerts-on-your-azure-vms-windows- with the fake executable execution. 

    • JentPaul's avatar
      JentPaul
      Copper Contributor
      Mar 31, 2023

      I didn't get my test alert initially, but I can now confirm that it indeed works 🙂

Date and Time
Mar 30, 20239:00 AM - 10:00 AM PDT