Azure updates

Azure Security Center—Improved just-in-time experience

Target availability: Q1 2020

The features, operation, and UI for Azure Security Center’s just-in-time tools that secure your management ports have been enhanced.

• Microsoft Defender for Cloud
• Security

Fileless attack detection for Linux is now in preview

Azure Security Center is extending fileless attack detection for Linux, in addition to Windows.

• Microsoft Defender for Cloud
• Security

Azure Disk Encryption in more places, and more services offering customer-managed keys

Azure Disk Encryption enables you to encrypt your Azure Virtual Machine disks with your keys safeguarded in Azure Key Vault.

• Microsoft Defender for Cloud
• Security

Release of Microsoft Secure Code Analysis toolkit to help you build secure code

With the Microsoft Security Code Analysis extension, you can infuse security analysis tools including Credential Scanner, BinSkim, and others into your Azure DevOps continuous integration and delivery (CI/CD) pipelines.

• Microsoft Defender for Cloud
• Security

Threat Protection for Azure Key Vault in Public Preview in North America Regions

Azure Key Vault is an essential service for protecting data and improving performance of cloud applications by offering the ability to centrally manage keys, secrets, cryptographic keys and policies in the cloud.

• Microsoft Defender for Cloud
• Security

Threat Protection for Azure Storage includes Malware Reputation Screening

You can now view detected malware across storage accounts using Azure Security Center.

• Microsoft Defender for Cloud
• Security

Workflow automation with Logic Apps

Today we are introducing a new capability in Security Center that allows customers to create automation configurations leveraging Azure Logic Apps and to create policies that will automatically trigger them based on specific ASC findings such as Recommendations or Alerts.

• Microsoft Defender for Cloud
• Security

Azure Security Center Quick Fix for bulk resources generally available

With the many tasks that a user is given as part of Secure Score, the ability to effectively remediate issues across a large fleet can become challenging. In order to simplify remediation of security misconfigurations and to be able to quickly remediate recommendations on a bulk of resources and improve your secure score you can use Quick Fix.

• Microsoft Defender for Cloud
• Security

Additional regulatory compliance standards in Azure Security Center

The Regulatory Compliance dashboard provides insights into your compliance posture based on Security Center assessments. The dashboard shows how your environment complies with controls and requirements designated by specific regulatory standards and industry benchmarks and provides prescriptive recommendations for how to address these requirements.

• Microsoft Defender for Cloud
• Security
• Features

Scan container images for vulnerabilities in Azure Security Center

Azure Security Center can now scan container images in Azure Container Registry for vulnerabilities. The image scanning works by parsing the container image file, then checking to see whether there are any known vulnerabilities (powered by Qualys).

• Microsoft Defender for Cloud
• Security

Threat Protection for Azure Kubernetes Service (AKS) Support in Security Center

Security Center is expanding its support in the container space to one of the fastest growing services in Azure - Azure Kubernetes Service.

• Microsoft Defender for Cloud
• Security

Vulnerability assessment in Azure Security Center

Applications that are installed in virtual machines could often have vulnerabilities that could lead to a breach of the virtual machine. We are announcing that the Security Center Standard tier includes built-in vulnerability assessment for virtual machines for no additional fee.

• Microsoft Defender for Cloud
• Security

Extending Azure Security Center coverage with platform for community and partners

To support Security Center’s fast growth in the marketplace and meet our customers’ demands around threat protection, cloud security posture and enterprise scale deployment and automation, our team delivered on many new capabilities, as well as worked with some new partners that are part of the Microsoft Intelligent Security Association.

• Microsoft Defender for Cloud
• Security

Advanced data security for SQL servers on Azure Virtual Machines

Azure Security Center’s support for threat protection and vulnerability assessment for SQL DBs running on IaaS virtual machines (VMs) is now in preview

• Microsoft Defender for Cloud
• Security

Azure Security Center—Support for custom policies

Azure Security Center now supports custom policies (in preview). Our customers have been wanting to extend their current security assessments coverage in Security Center with their own security assessments based on policies that they create in Azure Policy. With support for custom policies, this is now possible.

• Microsoft Defender for Cloud
• Security

Azure Security Center—Advanced integrations with export of recommendations and alerts

In order to enable enterprise level scenarios on top of Security Center, it’s now possible to consume Security Center alerts and recommendations in additional places except the Azure portal or API.

• Microsoft Defender for Cloud
• Security