Defender for Cloud - Workload Protection features per Workload ?

[acamillo]

I've been thinking about all the current Protection Use cases of Defender for Cloud (Mar/22).

There is support for many cloud-native workloads so a bird's eye view of what can be achieved on each is quite welcome I believe.

So I've scoured the public official docs and made a chart of some of the capabilities per workload.

I don't know if there's a better, public and official document on this?

This is what I found out in my own research:

The list of Workloads was retrieved from the official Microsoft docs page.

For each Workload’s Protection Use cases, the official public docs file was referenced.

There are nuances for supported controls per platform so be sure to check the sources for all details.

Information updated on Mar 2022.

All Information contained in here must always be checked against the latest documentation.

For a Complete list of all alerts generated by Defender for Cloud, per workload with reference of MITRE ATT&CK’s tactics, check out this official doc.

source: Microsoft Defender for servers — the benefits and features | Microsoft Docs

source: Container security with Microsoft Defender for Cloud | Microsoft Docs

source: Microsoft Defender for App Service — the benefits and features | Microsoft Docs

source: Microsoft Defender for Storage — the benefits and features | Microsoft Docs

Source: Reference table for all security alerts in Microsoft Defender for Cloud | Microsoft Docs

Source: Reference table for all security alerts in Microsoft Defender for Cloud | Microsoft Docs

Source: Microsoft Defender for DNS — the benefits and features | Microsoft Docs

Source Azure SQL: Enable database protection for your subscription — Microsoft Defender for Azure Cosmos DB | Microsof...

Source SQL Servers on Machines: Enable database protection for your subscription — Microsoft Defender for Azure Cosmos DB | Microsof...

Source: Microsoft Defender for open-source relational databases — the benefits and features | Microsoft Docs

Source: Overview of Defender for Azure Cosmos DB — Microsoft Defender for Azure Cosmos DB | Microsoft Docs

[#2]

I found this public document with a great list of supported features per workload:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/features-paas?wt.mc_id=SecNinja_ascninja