Defender for Cloud

Using Azure Arc only for Defender for Servers or Azure monitoring Agent? Lock it down!

Intro While reviewing Defender for Servers and AMA agent implementations across various customers, I noticed that not all of them are following best security practices for Azure Arc deployments. In this blog, I want to …

April 14, 2025 · 6 min · Thomas Verheyden
Defender for Cloud

After 2 years a new release of MDE-Troubleshooter!

Lately, I’ve been doing a lot of Defender for Endpoint deployment/configuration troubleshooting, which prompted me to dust off my MDE-Troubleshooter. I noticed it was missing some new and improved configurations, so I …

January 7, 2025 · 1 min · Thomas Verheyden
Defender for Cloud

New eBook, “Demystifying Microsoft Defender for Servers” by James Agombar

I’m thrilled to share the launch of the new eBook, “Demystifying Microsoft Defender for Servers” by James Agombar 🎉 I had the pleasure of being a technical reviewer for this eBook, and I can confidently say it’s a …

January 3, 2025 · 1 min · Thomas Verheyden
Defender for Cloud

Tutorial: How to enable/disable Defender for Servers Plans at resources level 

Intro I noticed that more and more clients are starting to use mixed license model for Defender for Servers. Previous you could only enable Defender for Server at the subscription level. Microsoft also noticed this and …

March 6, 2024 · 3 min · Thomas Verheyden
Defender for Cloud

Unleash the power of defender plan 2: Just-in-time VM access – part 4

Intro Malicious actors actively search for machines with open management ports, such as RDP or SSH, to exploit. All of your virtual machines are potential targets for these attacks if you have those ports open. Once a VM …

July 20, 2023 · 6 min · Thomas Verheyden
Defender for Cloud

Unleash the power of Defender for Servers Plan 2: Agentless scanning – part 3

Intro Welcome to part three of the blog series on Unleach the power of Defender for Servers Plan 2! In our previous blog, we explored how to start implementing Adaptive Application control. In part 3, we’ll dive into the …

June 14, 2023 · 8 min · Thomas Verheyden
Defender for Cloud

Direct on board your non-Azure servers to defender for cloud WITHOUT Azure Arc

Intro Up until now, onboarding non-Azure servers to Defender for Servers required Azure Arc as a mandatory pre-requisite. With this new release, Microsoft is introducing an additional direct onboarding path for non-Azure …

June 5, 2023 · 5 min · Thomas Verheyden
Defender for Cloud

Unleash the power of Defender for Servers Plan 2: Adaptive Application Controls – Part 2

Welcome, this is the second part of the Defender for server P2 advanced protection series I will blog about. If you want to read the other parts they can be found here: Part 0 Part 1 The topic of this blog will be about …

May 17, 2023 · 8 min · Thomas Verheyden
Defender for Cloud

How to work around the Azure Security Agent extension not deploying by default on the latest VM windows images, a currently know limitation…

Intro This blog will be about an issue I bumped into when deploying one of the enhanced protection features in defender for cloud. The enhanced feature, adaptive application control, requires the deployment of the Azure …

May 4, 2023 · 4 min · Thomas Verheyden
Defender for Cloud

Unleash the power of Defender for Servers Plan 2: File integrity monitoring – Part 1

Intro Welcome to part 1 of the blog series about enhanced protection features available in Defender for Servers Plan 2. Part 1 will be about the protection feature called File Integrity Monitoring (FIM) in Defender for …

April 19, 2023 · 10 min · Thomas Verheyden