Microsoft Defender for Cloud - Using and understanding the portal

In this, second episode Niclas Madsen, Accenture, Marius Solbakke, Ameste Fourtytwo, and Olav Tvedt, Sparebanken Vest go a little bit deeper into their Microsoft Defender for cloud journey. Topics being covered in this episode are getting started, recommendations, attack path analysis, security alerts, inventory, and cloud security explorer.

What about the Workbooks you say? That will be an own dedicated episode soon to follow ;-)

As always, we talk about lessons learned (sometimes the hard way), have discussions, and hopefully some good advice for you.

00:00 Intro
00:55 Overview
01:38 MMC snap-in?
02:31 Roles/permissions required for access
10:30 News
11:56 Getting started
14:58 Recommendations
26:55 Attack Path Analysis
30:40 Security Alerts
32:58 Security Alerts Map
34:25 Inventory
36:00 Resource health
36:48 Cloud Security Explorer
39:09 VMs with Log4Shell vulnerability and customizations