Hi Guys - Looking for a most feasible option to fetch/pull, collect Security Related configuration and settings from Microsoft Windows 2012 R2 and SQL Server 2014 SP2 using an automated mechanism.
Our solution needs to connect to one or multiple windows servers using a local agent (micro services based docker) installed on a VM on-prem, collect the data using API/SSH then upload that data to our cloud controller for analysis/ML models and display the output on a dashboard
These are the three options that we have identified so far for evaluation and looking for some guidance:
1) https://www.microsoft.com/en-us/download/details.aspx?id=55319 - This runs on local machine only (no API available?)
2) https://docs.microsoft.com/en-us/graph/security-concept-overview
3) https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/managemen...
Can someone here help with pointers which one is most suitable to accomplish the task as outlined above OR suggest a better option.
Thanks in advance!
