Microsoft Defender for Cloud

The definitive practical guide to Microsoft Defender for Cloud Fully covers new components and multi-cloud enhancements!

Microsoft Defender for Cloud offers comprehensive tools for hardening resources, tracking security posture, protecting against attacks, and streamlining security management - all in one natively integrated toolset. Now, leading Microsoft security experts Yuri Diogenes and Tom Janetscheck help you apply its robust protection, detection, and response capabilities throughout your operations, protecting workloads running on all your cloud, hybrid, and on-premises platforms.

This guide shows how to make the most of new components, enhancements, and deployment scenarios, as you address today's latest threat vectors. Sharing best practices, expert tips, and optimizations only available from Microsoft's Defender for Cloud team, the authors walk through improving everything from policies and governance to incident response and risk management. Whatever your role or experience, they'll help you address new security challenges far more effectively -- and save hours, days, or even weeks.

Two of Microsoft's leading cloud security experts show how to:

• Assess new threat landscapes, the MITRE ATT&CK framework, and the implications of "assume-breach"
• Explore Defender for Cloud architecture, use cases, and adoption considerations including multicloud with AWS and GCP
• Plan for effective governance, successful onboarding, and maximum value
• Fully visualize complex cloud estates and systematically reduce their attack surfaces
• Prioritize risks with Secure Score, and leverage at-scale tools to build secure cloud-native apps
• Establish consistent policy enforcement to avoid drift
• Use advanced analytics and machine learning to identify attacks based on signals from all cloud workloads
• Enhance security posture by integrating with the Microsoft Sentinel SIEM/SOAR, Microsoft Purview, and Microsoft Defender for Endpoint
• Leverage just-in-time VM access and other enhanced security capabilities

About This Book

• For architects, designers, implementers, SecOps professionals, developers, and security specialists working in Microsoft Azure environments
• For all IT professionals and decision-makers concerned with securing modern hybrid/multicloud environments, cloud-native apps, and PaaS services

《Microsoft Defender for Cloud 完全實用指南》是一本全面介紹新組件和多雲增強功能的書籍！

《Microsoft Defender for Cloud》提供了全面的工具，用於加固資源、追蹤安全狀態、防禦攻擊以及簡化安全管理，所有這些功能都集成在一個原生工具組中。現在，領先的 Microsoft 安全專家 Yuri Diogenes 和 Tom Janetscheck 將幫助您在整個運營過程中應用其強大的保護、檢測和響應能力，保護在所有雲端、混合和本地平台上運行的工作負載。

本指南展示了如何充分利用新組件、增強功能和部署方案，以應對當今最新的威脅向量。作者分享了來自 Microsoft Defender for Cloud 團隊的最佳實踐、專家技巧和優化建議，從策略和治理到事件響應和風險管理，他們將指導您更有效地應對新的安全挑戰，並節省數小時、數天甚至數週的時間。

《Microsoft 的兩位領先雲安全專家展示了如何：》

- 評估新的威脅環境、MITRE ATT&CK 框架以及「假設遭受入侵」的影響
- 探索 Defender for Cloud 的架構、使用案例和採用考慮因素，包括與 AWS 和 GCP 的多雲整合
- 規劃有效的治理、成功的入門和最大價值
- 完全可視化複雜的雲端資產，並系統性地減少其攻擊面
- 使用 Secure Score 優先處理風險，並利用大規模工具構建安全的雲原生應用程式
- 建立一致的策略執行，以避免漂移
- 利用高級分析和機器學習，根據所有雲端工作負載的信號識別攻擊
- 通過與 Microsoft Sentinel SIEM/SOAR、Microsoft Purview 和 Microsoft Defender for Endpoint 的集成增強安全狀態
- 利用即時虛擬機存取和其他增強的安全功能

《關於本書》

- 適用於在 Microsoft Azure 環境中工作的架構師、設計師、實施者、SecOps 專業人員、開發人員和安全專家
- 適用於所有關注保護現代混合/多雲環境、雲原生應用程式和 PaaS 服務的 IT 專業人員和決策者

Yuri Diogenes, MsC, holds a Master of Science in cybersecurity intelligence and forensics investigation from UTICA College and is currently working on his Ph.D. in Cybersecurity Leadership from Capitol Technology University. Yuri has been working at Microsoft since 2006, and currently, he is a Principal PM Manager for the CxE Microsoft Defender for Cloud Team. Yuri has published a total of 26 books, mostly about information security and Microsoft technologies. Yuri is also a professor at ECCouncil University, where he teaches in the Bachelor in Cybersecurity Program. Yuri holds an MBA and many IT/Security industry certifications, such as CISSP, MITRE ATT&CK Cyber Threat Intelligence Certified, ECND, ECEH, ECSA, ECHFI, CompTIA Security+, CySA+, Network+, CASP, and CyberSec First Responder. You can follow Yuri on Twitter at @yuridiogenes.

Tom Janetscheck is a Senior Program Manager in the CxE Microsoft Defender for Cloud team, where he works with his friend Yuri, helping customers onboard and deploy Microsoft Defender for Cloud. As a former Microsoft MVP, Tom joined the team during COVID-19 in Spring 2020, and he deeply missed in-person conferences, as he loves to speak to audiences all over the world. With almost 20 years of experience in various IT admin and consulting roles, Tom has a deep background in IT infrastructure and security, and he holds various certifications, including MCSE and MCTS. When Tom is not writing a book, preparing a conference or user group session, or helping his customers onboard Defender for Cloud, he is an enthusiastic motorcyclist, scuba diver, and musician. He plays the guitar, bass, and drums. He also volunteers as a firefighter at his local fire department and can usually be met attending rock concerts all over the place. You can follow Tom on Twitter at @azureandbeyond.

Yuri Diogenes, MsC，擁有UTICA College的網絡安全情報和取證調查碩士學位，目前正在Capitol Technology University攻讀網絡安全領導博士學位。Yuri自2006年起在Microsoft工作，目前是CxE Microsoft Defender for Cloud團隊的首席產品經理經理。Yuri已經出版了26本書，大部分關於信息安全和Microsoft技術。Yuri還是ECCouncil University的教授，在網絡安全學士課程中教授。Yuri擁有MBA學位和許多IT/安全行業認證，如CISSP、MITRE ATT&CK Cyber Threat Intelligence Certified、ECND、ECEH、ECSA、ECHFI、CompTIA Security+、CySA+、Network+、CASP和CyberSec First Responder。您可以在Twitter上關注Yuri，用戶名為@yuridiogenes。

Tom Janetscheck是CxE Microsoft Defender for Cloud團隊的高級項目經理，他與他的朋友Yuri一起工作，幫助客戶上手和部署Microsoft Defender for Cloud。作為前Microsoft MVP，Tom於2020年春季在COVID-19期間加入了團隊，他非常想念面對面的會議，因為他喜歡與世界各地的觀眾交流。Tom在各種IT管理和咨詢角色中擁有近20年的經驗，對IT基礎設施和安全有深厚的背景，並擁有多種認證，包括MCSE和MCTS。當Tom不在寫書、準備會議或用戶組會議，或者幫助客戶上手Defender for Cloud時，他是一位熱情的摩托車手、潛水員和音樂家。他會彈吉他、貝斯和鼓。他還在當地的消防部門擔任志願消防員，通常可以在各地的搖滾音樂會上見到他。您可以在Twitter上關注Tom，用戶名為@azureandbeyond。