User Profile
Eli
MicrosoftJoined Sep 26, 2018
User Widgets
Recent Discussions
Re: Azure Defender for Containers - Limits, Control daemonsets and deployments, updates, no uninstall?
Hello Jeffery, This is Eli from Defender for Containers support. Thanks for the feedback! We'd like to investigate your claims deeper. You stated that a support case was created: Can you please provide its ID? To keep the privacy, please email it to me at eli.sagie@microsoft.com. Thanks.3.9KViews0likes1CommentRe: Disable few policies that are applied by default
It is possible. Here is the recommended practice: go to MDfC portal -> Environment settings -> select your subscription -> Security policy. Select the default initiative assignment, it will open the policy initiative assignment page. Select the Parameters tab, uncheck "Only show parameters that need input or review". After a moment all policies of the initiative get listed. Most are marked as AuditIfNotExists or simply Audit. Find the one you wish to change and Disable it. When done save and exit. Wait 12h for all recommendations to refresh and those you have disabled should be disappear.7.9KViews0likes0CommentsRe: How is Azure Databricks Security Scored/monitored
Databricks are not supported by DfC due to their sort-live and locked resource nature. All DfC assessments are excluded from Databricks. Some alerts concerning the network environment of Databricks may be triggered (but cannot be dismissed as well).1.9KViews1like1CommentRe: Product feedback
KevinNiko This statement of yours is correct "It seems Log Analytics workspace does not pick up older records (prior to me enabling continuous export to Log Analytics workspace)." Continuous export only starts the exporting the recommendations from the time you have configured it while ARG retain records for some time (I think it's 90 days).1.8KViews0likes0CommentsRe: Endpoint Protection not installed on non-Azure servers
Ambarish Haridathan log existence by itself is not enough, you need to see that it is current (at least once a day). Please check this out for better troubleshooting: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows-troubleshoot If further help still required and if you have Microsoft Support SR# please send it over so I can internally investigate further, else please create one and refer my name (Eli Sagie) as reference.5.8KViews0likes3CommentsRe: Endpoint Protection not installed on non-Azure servers
Ambarish Haridathan , Please search the Log Analytics workspace in which the machine is connected to for the ProtectionStatus logs. Query to target your computer looks like: ProtectionStatus | where Computer has "<your computer name>" check the ProtectionStatusRank. Anything other than 150 indicate unhealthy state. If no logs return then it might be computer connection to workspace issue, check the 'Heartbeat' on the same query window5.9KViews0likes7Comments
Recent Blog Articles
No content to show