Path Lines of Code Container Image Scan Vulnerability Assessment/ARG queries/Container Registry Vulnerability Assessment Images Scan Summary/readme.md 15 Container Image Scan Vulnerability Assessment/ARG queries/List Container Registry Vulnerability Assessment Results/readme.md 28 Container Image Scan Vulnerability Assessment/Container Image Scanning Notification Playbook/Readme.md 13 Container Image Scan Vulnerability Assessment/Image Scan Automation Enrichment Security Gate/README.md 9 Container Image Scan Vulnerability Assessment/README.md 17 Contributing.md 36 DemoAutomation/azuredeploy.json 403 DemoAutomation/readme.md 4 Kusto/Azure Resource Graph/ASC exempt and disabled recommendations/Readme.md 19 Kusto/Azure Resource Graph/Container Registry Vulnerability Assessment Images Scan Summary/readme.md 15 Kusto/Azure Resource Graph/Count Healthy and Unhealthy/Readme.md 23 Kusto/Azure Resource Graph/List Container Registry Vulnerability Assessment Results/readme.md 28 Kusto/Azure Resource Graph/List VM Vulnerabilities/readme.md 54 Kusto/Azure Resource Graph/List of unhealthy resources for a specific standard/readme.md 19 Kusto/Azure Resource Graph/Regulatory Compliance Assessments State/readme.md 14 Kusto/Azure Resource Graph/Starter Kit - ASC Pricing/README.md 100 Kusto/Azure Resource Graph/Starter Kit - ASC Recommendations/README.md 150 Kusto/Azure Resource Graph/Time Indicators/readme.md 11 Kusto/Azure Resource Graph/join assessment with secure score/readme.md 35 Kusto/Azure Resource Graph/readme.md 15 Kusto/Log Analytics/README.md 14 Kusto/Log Analytics/Regulatory Compliance continuous export/Readme.md 30 Kusto/readme.md 4 Labs/Files/AWS-Cloudformation-Template.json 349 Labs/Files/ContosoData/ReadMe.md 1 Labs/Files/dcspmlabdeploy.json 131 Labs/Files/labdeploy.json 697 Labs/Files/nested/nested-linux-vm.json 271 Labs/Files/nested/nested-windows-vm.json 259 Labs/Images/Module-12-Microsoft-Defender-for-Cloud-database-protection.md 140 Labs/Images/asc-lab-architecture.svg 1344 Labs/Modules/Module 14-Onboarding Azure DevOps to Defender for Cloud.md 74 Labs/Modules/Module 15 - Onboarding GitHub to Defender for Cloud.md 78 Labs/Modules/Module 16 - Protecting On-Prem Servers in Defender for Cloud.md 150 Labs/Modules/Module 17 –Defender CSPM.md 153 Labs/Modules/Module 19 - Defender for Storage.md 500 Labs/Modules/Module 20 –Contextual Security capabilities for AWS using Defender CSPM.md 75 Labs/Modules/Module 21 – Contextual Security capabilities for GCP using Defender CSPM.md 54 Labs/Modules/Module 23 - Data security posture management.md 184 Labs/Modules/Module 24 - AI Workloads.md 48 Labs/Modules/Module 25 - Defender XDR Integration.md 420 Labs/Modules/Module 26 - Code Reachability Vulnerabilities.md 48 Labs/Modules/Module-1-Preparing-the-Environment.md 92 Labs/Modules/Module-10-GCP.md 59 Labs/Modules/Module-11-AWS.md 51 Labs/Modules/Module-12-Microsoft-Defender-for-Cloud-database-protection.md 158 Labs/Modules/Module-13-Defender for APIs.md 121 Labs/Modules/Module-18- Agentless-container-posture-through-Defender-DCSPM.md 81 Labs/Modules/Module-2-Exploring-Azure-Security-Center.md 121 Labs/Modules/Module-22-MDE-integration.md 39 Labs/Modules/Module-3-ASC-Security-Policy.md 86 Labs/Modules/Module-4-Regulatory-Compliance.md 88 Labs/Modules/Module-5-Improving-your-Secure-Posture.md 169 Labs/Modules/Module-6-Azure-Defender.md 55 Labs/Modules/Module-7-Exporting-ASC-information-to-a-SIEM.md 53 Labs/Modules/Module-8-Advance-Cloud-Defense.md 67 Labs/Modules/Module-9-Agentless-Container-Vulnerability-Assessment-Scanning.md 77 Labs/ReadMe.md 170 Legacy Log Analytics dashboards/NotableEventsQueries.md 153 Legacy Log Analytics dashboards/README.md 24 Onboarding/AWS/ReadMe.md 118 Onboarding/AWS/requirements.txt 4 Onboarding/Misc/Inventory.md 13 Onboarding/Misc/Next-Steps.md 11 Onboarding/Misc/Scheduled-Automation.md 8 Onboarding/Modules/1-Prerequisites.md 42 Onboarding/Modules/2-Roles-and-Permissions.md 57 Onboarding/Modules/3-Policy-Management.md 202 Onboarding/Modules/4-Onboarding-MDC-Features.md 118 Onboarding/Modules/5-Management.md 99 Onboarding/ReadMe.md 203 Policy/Apply-Diag-Settings-LA-Subscription/policy.json 384 Policy/Apply-Diag-Settings-LA-Subscription/readme.md 6 Policy/Audit-Deploy Qualys 3rd party Windows/policy.json 129 Policy/Audit-Deploy Qualys 3rd party Windows/readme.md 4 Policy/Audit-LinuxVM-ADE-And-HBE/policy.json 216 Policy/Audit-LinuxVM-ADE-And-HBE/readme.md 16 Policy/Audit-WindowsVM-ADE-And-HBE/policy.json 253 Policy/Audit-WindowsVM-ADE-And-HBE/readme.md 13 Policy/Configure API Security Posture Extension/AzurePolicy.json 116 Policy/Configure API Security Posture Extension/README.md 21 Policy/Configure API Security Posture Extension/azurepolicy.parameters.json 26 Policy/Configure API Security Posture Extension/azurepolicy.rules.json 80 Policy/Configure-DCSPM-Extensions/README.md 23 Policy/Configure-DCSPM-Extensions/azurepolicy.json 288 Policy/Configure-DCSPM-Extensions/azurepolicy.parameters.json 63 Policy/Configure-DCSPM-Extensions/azurepolicy.rules.json 150 Policy/Define MDC Trusted IPs/DefineMDCTrustedIPsPolicy.json 115 Policy/Define MDC Trusted IPs/README.md 2 Policy/Deploy AMA DCR for Security Events collection/DeployAMADCRForSecurityEventsCollection.json 572 Policy/Deploy AMA DCR for Security Events collection/DeployAMADCRForSecurityEventsCollectionVMAssociation.json 342 Policy/Deploy AMA DCR for Security Events collection/README.md 21 Policy/Deploy AMA DCR for Security Events collection/azuredeploy.json 1081 Policy/Deploy LA agent based on location/policies/Deploy_Log_Analytics_agent_for_Linux_VMs_-_Location_Based_be4ef9a1-1798-41c4-ba08-78b3247dd40c/policy.json 398 Policy/Deploy LA agent based on location/policies/Deploy_Log_Analytics_agent_for_Linux_virtual_machine_scale_sets_-_Location_Based_c90d6803-2408-4194-891e-a878a6925573/policy.json 395 Policy/Deploy LA agent based on location/policies/Deploy_Log_Analytics_agent_for_Windows_VMs_-_Location_Based_117bee00-5ae8-4226-852f-5d9b2186b2a9/policy.json 324 Policy/Deploy LA agent based on location/policies/Deploy_Log_Analytics_agent_for_Windows_virtual_machine_scale_sets_-_Location_Based_c90d6803-2408-4194-891e-a878a6925566/policy.json 321 Policy/Deploy LA agent based on location/readme.md 2 Policy/Deploy and Update Policy extension on VMs/Deploy and Update Guest Configuration extension on Windows VMs.json 257 Policy/Deploy and Update Policy extension on VMs/Deploy and Update Linux Guest Configuration extension on Linux VMs.json 273 Policy/Deploy and Update Policy extension on VMs/readme.md 4 Policy/Enable Defender for Servers plans/EnableDefenderForServers.json 88 Policy/Enable Defender for Servers plans/readme.md 9 Policy/Enable Defender for Storage - Per-Storage Account Pricing Plan/MDC_Microsoft_Defender_Storage_Per_Storage.json 81 Policy/Enable Defender for Storage - Per-Storage Account Pricing Plan/README.md 14 Policy/Enable Disk Encryption on Windows VMs only/diskencryptionWindows.json 210 Policy/Enable Disk Encryption on Windows VMs only/policy.json 225 Policy/Enable Disk Encryption on Windows VMs only/readme.md 2 Policy/Enable-ContinuousExport-Filtered-by-Defender-Plan/Continuous-Export-to-EventHub/policy.json 634 Policy/Enable-ContinuousExport-Filtered-by-Defender-Plan/Continuous-Export-to-LogAnalyticsWorkspace/policy.json 632 Policy/Enable-ContinuousExport-Filtered-by-Defender-Plan/readme.md 15 Policy/Modification for Vulnerability Assessment/readme.md 7 Policy/readme.md 2 PowerBI/MDC Plan Coverage/README.md 18 PowerBI/SampleReport/README.md 33 PowerBI/ServerContainerVlnRiskScore/README.md 5 Powershell scripts/3rd party SIEM integration/README.md 61 Powershell scripts/Agentless Container Posture/README.md 15 Powershell scripts/Agentless Scanning CMK support/README.md 23 Powershell scripts/Alerts/README.md 11 Powershell scripts/Analyze Defender For Storage Configuration/readme.md 40 Powershell scripts/Authorization token retrieval for REST APIs/README.md 41 Powershell scripts/Create AMA DCR for Security Events collection/README.md 26 Powershell scripts/Defender APIs Cost Estimator/readme.md 23 Powershell scripts/Defender for SQL servers on machines status report/README.md 86 Powershell scripts/Defender for Servers on resource level/readme.md 4 Powershell scripts/DefenderforAPIs-onboardAPIM-at-scale/Readme.md 11 Powershell scripts/Disable CSPM Plan/README.md 9 Powershell scripts/Enable AI Threat protection plan/Custom policy/custom_poicy_with_prompt_evidence.json 124 Powershell scripts/Enable AI Threat protection plan/Custom policy/custom_policy_defender_for_ai.json 61 Powershell scripts/Enable AI Threat protection plan/Powershell scripts with AI extension/sample2.txt 2 Powershell scripts/Enable AI Threat protection plan/README.md 23 Powershell scripts/Enable AMA Auto Provisioning/readme.md 14 Powershell scripts/Enable Defender for SQL servers on machines/readme.md 49 Powershell scripts/Enable MDC with a custom workspace/README.md 130 Powershell scripts/Exemptions/README.md 22 Powershell scripts/Export Containers Affected Components/README.md 13 Powershell scripts/Export a list of recommendations for all subscriptions/README.md 10 Powershell scripts/Generate exemption report/README.md 21 Powershell scripts/Get Security Assessments (Recommendations)/README.md 19 Powershell scripts/Integration Settings/readme.md 56 Powershell scripts/JIT Scripts/JIT Custom Role/README.md 11 Powershell scripts/JIT Scripts/New JIT Policy/README.md 38 Powershell scripts/MDE Integration/Enable MDE Integration for Linux/readme.md 11 Powershell scripts/MDE Integration/Enable MDE Unified solution/readme.md 10 Powershell scripts/MDE Integration/Enterprise Report on MDC - MDE VM Extension Failures/Readme.md 2 Powershell scripts/MDE Integration/MDE VM Extension Single VM Onboard/Readme.md 3 Powershell scripts/MDE Integration/Migrate GCC Tenant/Readme.md 31 Powershell scripts/Machines Not Protected by Defender for SQL Extension/readme.md 21 Powershell scripts/MalwareScanScript/Readme.md 70 Powershell scripts/README.md 14 Powershell scripts/Read Azure Storage Transaction Metrics/README.md 10 Powershell scripts/Remove ASC Default policy assignment/README.md 22 Powershell scripts/Remove Log Analytics Agent At Scale/README.md 5 Powershell scripts/Remove Malware Scanning Index Tags/readme.md 43 Powershell scripts/Reset security configurations customization/README.md 47 Powershell scripts/Security Alerts in Azure Activity Log/ActivityLogAlert.schema.json 422 Powershell scripts/Security Alerts in Azure Activity Log/README.md 89 Powershell scripts/Security Event collection tier/README.md 49 Powershell scripts/Storage Price Estimation Script/README.md 108 Powershell scripts/Subscription Management/README.md 17 Powershell scripts/Vulnerability Solution/README.md 61 Powershell scripts/Workflow automation and export data types schemas/README.md 3 Powershell scripts/Workflow automation and export data types schemas/Recommendation.schema.json 289 Powershell scripts/Workflow automation and export data types schemas/SecurityAlert.schema.json 316 Pricing & Settings/ARM Templates/Custom ASC workspace/README.md 16 Pricing & Settings/ARM Templates/Custom ASC workspace/configureCustomWorkspaceStandard.json 132 Pricing & Settings/ARM Templates/Set-ASC-Bundle-Pricing.json 78 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-ARM.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-All.json 262 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-AppService.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-ContainerRegistries.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-DNS.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-KeyVault.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-Kubernetes.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-OSRDBs.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-SQLDBs.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-SQLServers.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-Servers.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/ASC-AzureDefender-for-Storage.json 63 Pricing & Settings/Azure Policy definitions/Azure Defender Plans/readme.md 8 Pricing & Settings/Azure Policy definitions/Enable integrations/AscMCASIntegration-deployIfNotExists.json 64 Pricing & Settings/Azure Policy definitions/Enable integrations/AscMDEIntegration-deployIfNotExists.json 64 Pricing & Settings/Azure Policy definitions/MDC email contact/MDCEmailContact-deployIfNotExists.json 113 Pricing & Settings/Azure Policy definitions/Workspace Management/README.md 2 Pricing & Settings/Azure Policy definitions/Workspace Management/Regional Workspaces/README.md 7 Pricing & Settings/Azure Policy definitions/Workspace Management/Regional Workspaces/deploy-MMA-based-on-region.json 132 Pricing & Settings/Continuous export/Audit Continuous Export via policy/Export to Event Hub Audit Policy/ExportToEventHubAuditPolicy.json 47 Pricing & Settings/Continuous export/Audit Continuous Export via policy/Export to Event Hub Audit Policy/README.md 22 Pricing & Settings/Continuous export/Audit Continuous Export via policy/Export to Log Analytics Workspace Audit Policy/ExportToLogAnalyticsWorkspaceAuditPolicy.json 47 Pricing & Settings/Continuous export/Audit Continuous Export via policy/Export to Log Analytics Workspace Audit Policy/README.md 22 Pricing & Settings/Continuous export/Configure Continuous Export in scale via policy/Export to Event Hub Policy/ExportASCAlertsAndRecommendationsToEventHubPolicy.json 319 Pricing & Settings/Continuous export/Configure Continuous Export in scale via policy/Export to Event Hub Policy/README.md 25 Pricing & Settings/Continuous export/Configure Continuous Export in scale via policy/Export to Log Analytics Workspace Policy/ExportASCAlertsAndRecommendationsToLogAnalyticsWorkspacePolicy.json 292 Pricing & Settings/Continuous export/Configure Continuous Export in scale via policy/Export to Log Analytics Workspace Policy/README.md 25 Pricing & Settings/Continuous export/Export-ASCQualysVulnerabities/readme.md 11 Pricing & Settings/Continuous export/README.md 12 Pricing & Settings/Defender for Kubernetes/Defender extension installation examples/README.md 7 Pricing & Settings/Defender for Kubernetes/Defender extension installation examples/azure-defender-extension-arm-template.json 79 Pricing & Settings/Defender for Kubernetes/Defender extension installation examples/azure-defender-extension-parameters.json 18 Pricing & Settings/Defender for Kubernetes/Defender extension installation examples/azure-defender-rp-installation-postman-collection.json 218 Pricing & Settings/Defender for Kubernetes/README.md 14 Pricing & Settings/One Agent/Linux VM/Extensions/OneAgent-linuxExt-deployIfNotExists.json 31 Pricing & Settings/One Agent/Linux VM/Extensions/OneAgent-securityLinuxExt-deployIfNotExists.json 33 Pricing & Settings/One Agent/Linux VM/LinkedTemplates/DataCollectionRuleAssociations-deployIfNotExists.json 31 Pricing & Settings/One Agent/Linux VM/LinkedTemplates/DataCollectionRules-deployIfNotExists.json 148 Pricing & Settings/One Agent/Linux VM/LinkedTemplates/IdentitySystemAssigned-deployIfNotExists.json 24 Pricing & Settings/One Agent/Linux VM/LinkedTemplates/Solutions-deployIfNotExists.json 54 Pricing & Settings/One Agent/Linux VM/LinkedTemplates/Workspace-deployIfNotExists.json 30 Pricing & Settings/One Agent/Linux VM/OneAgent-deployIfNotExists.json 518 Pricing & Settings/One Agent/Linux VM/README.md 14 Pricing & Settings/One Agent/Linux VMSS/Extensions/OneAgent-linuxExt-deployIfNotExists.json 31 Pricing & Settings/One Agent/Linux VMSS/Extensions/OneAgent-securityLinuxExt-deployIfNotExists.json 33 Pricing & Settings/One Agent/Linux VMSS/LinkedTemplates/DataCollectionRuleAssociations-deployIfNotExists.json 31 Pricing & Settings/One Agent/Linux VMSS/LinkedTemplates/DataCollectionRules-deployIfNotExists.json 93 Pricing & Settings/One Agent/Linux VMSS/LinkedTemplates/IdentitySystemAssigned-deployIfNotExists.json 24 Pricing & Settings/One Agent/Linux VMSS/LinkedTemplates/Solutions-deployIfNotExists.json 54 Pricing & Settings/One Agent/Linux VMSS/LinkedTemplates/Workspace-deployIfNotExists.json 30 Pricing & Settings/One Agent/Linux VMSS/OneAgent-deployIfNotExists.json 514 Pricing & Settings/One Agent/Linux VMSS/README.md 14 Pricing & Settings/One Agent/README.md 14 Pricing & Settings/README.md 16 README.md 39 Remediation Policies/README.md 51 Remediation Policies/Templates/InitiativeAssignment.json 73 Remediation Policies/Templates/InitiativeDefinition.json 180 Remediation Policies/Templates/PolicyAppHttpsAccess.json 105 Remediation Policies/Templates/PolicySASecureTransfer.json 104 Remediation Policies/Templates/PolicyToEnforceAzureSqlSec.json 131 Remediation Policies/azuredeploy.json 167 Remediation scripts/Access to management ports on your Virtual Machines should be restricted/PowerShell/README.md 7 Remediation scripts/Access to management ports on your Virtual Machines should be restricted/README.md 12 Remediation scripts/Advanced data security should be enabled on your SQL servers/Logic App/README.md 17 Remediation scripts/Advanced data security should be enabled on your SQL servers/Logic App/azuredeploy.json 475 Remediation scripts/Advanced data security should be enabled on your SQL servers/README.md 11 Remediation scripts/Advanced data security should be enabled on your managed instances/Logic App/README.md 17 Remediation scripts/Advanced data security should be enabled on your managed instances/Logic App/azuredeploy.json 533 Remediation scripts/Advanced data security should be enabled on your managed instances/README.md 11 Remediation scripts/Automation account variables should be encrypted/Logic App/README.md 17 Remediation scripts/Automation account variables should be encrypted/Logic App/azuredeploy.json 467 Remediation scripts/Automation account variables should be encrypted/README.md 11 Remediation scripts/Create Azure RBAC Role based on CIEM access report/readme.md 20 Remediation scripts/Customize Endpoint Protection Recommendation/Readme.md 8 Remediation scripts/DDoS Protection Standard should be enabled/PowerShell/README.md 4 Remediation scripts/DDoS Protection Standard should be enabled/README.md 11 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Batch Account should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Batch Account should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Data Lake Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Data Lake Analytics should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Data Lake Storage Gen1 should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Data Lake Storage Gen1 should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Event Hub should be enabled/README.md 14 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Event Hub should be enabled/azurepolicy.json 161 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in IoT Hub should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in IoT Hub should be enabled/azurepolicy.json 225 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Key Vault should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Key Vault should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Logic Apps should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Logic Apps should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Redis Cache should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Redis Cache should be enabled/azurepolicy.json 111 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Search Services should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Search Services should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Service Bus should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Service Bus should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Stream Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Event Hub/Diagnostic logs in Stream Analytics should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Batch Account should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Batch Account should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Data Lake Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Data Lake Analytics should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Data Lake Storage Gen1 should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Data Lake Storage Gen1 should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Event Hub should be enabled/README.md 14 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Event Hub should be enabled/azurepolicy.json 161 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in IoT Hub should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in IoT Hub should be enabled/azurepolicy.json 225 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Key Vault should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Key Vault should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Logic Apps should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Logic Apps should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Redis Cache should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Redis Cache should be enabled/azurepolicy.json 111 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Search Services should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Search Services should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Service Bus should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Service Bus should be enabled/azurepolicy.json 121 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Stream Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Log Analytics/Diagnostic logs in Stream Analytics should be enabled/azurepolicy.json 129 Remediation scripts/Diagnostic Logs should be enabled on your resource/README.md 23 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Batch Account should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Batch Account should be enabled/azurepolicy.json 174 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Data Lake Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Data Lake Analytics should be enabled/azurepolicy.json 182 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Data Lake Storage Gen1 should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Data Lake Storage Gen1 should be enabled/azurepolicy.json 182 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Event Hub should be enabled/README.md 14 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Event Hub should be enabled/azurepolicy.json 214 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in IoT Hub should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in IoT Hub should be enabled/azurepolicy.json 278 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Key Vault should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Key Vault should be enabled/azurepolicy.json 174 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Logic Apps should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Logic Apps should be enabled/azurepolicy.json 174 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Redis Cache should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Redis Cache should be enabled/azurepolicy.json 164 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Search Services should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Search Services should be enabled/azurepolicy.json 174 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Service Bus should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Service Bus should be enabled/azurepolicy.json 174 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Stream Analytics should be enabled/README.md 15 Remediation scripts/Diagnostic Logs should be enabled on your resource/Storage Account/Diagnostic logs in Stream Analytics should be enabled/azurepolicy.json 182 Remediation scripts/Disk encryption should be applied on virtual machines/Logic App/Enable-AzureDiskEncryption.json 805 Remediation scripts/Disk encryption should be applied on virtual machines/Logic App/README.md 16 Remediation scripts/Disk encryption should be applied on virtual machines/Powershell/README.md 12 Remediation scripts/Disk encryption should be applied on virtual machines/README.md 17 Remediation scripts/Enable Network Security Groups on subnets/Azure Policy - Deny/AssignNSGtoSub Deny.json 55 Remediation scripts/Enable Network Security Groups on subnets/Azure Policy - Deny/README.md 18 Remediation scripts/Enable Network Security Groups on subnets/Azure Policy - DeployIfNotExists/Archive/NSG DeployIfNotExists.json 72 Remediation scripts/Enable Network Security Groups on subnets/Azure Policy - DeployIfNotExists/assign-nsg-to-subnets.json 96 Remediation scripts/Enable Network Security Groups on subnets/PowerShell/README.md 16 Remediation scripts/Enable Network Security Groups on subnets/README.md 12 Remediation scripts/Enable auditing for the Keyvault/Logic App/KVAudit.json 48 Remediation scripts/Enable auditing for the Keyvault/Logic App/README.md 14 Remediation scripts/Enable auditing for the Keyvault/Logic App/azuredeploy.json 147 Remediation scripts/Enable auditing for the SQL server/Azure Policy - Deny/README.md 17 Remediation scripts/Enable auditing for the SQL server/Azure Policy - Deny/azurepolicy.json 26 Remediation scripts/Enable auditing for the SQL server/Azure Policy - Deny/azurepolicy.parameters.json 1 Remediation scripts/Enable auditing for the SQL server/Azure Policy - Deny/azurepolicy.rules.json 17 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/Log Analytics/README.md 18 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/Log Analytics/azurepolicy.json 151 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/Log Analytics/azurepolicy.parameters.json 10 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/Log Analytics/azurepolicy.rules.json 134 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/Log Analytics/createLogAnalytics.template.json 43 Remediation scripts/Enable auditing for the SQL server/Azure Policy DeployIfNotExists/README.md 10 Remediation scripts/Enable auditing for the SQL server/Logic App/README.md 15 Remediation scripts/Enable auditing for the SQL server/Logic App/azuredeploy.json 2048 Remediation scripts/Enable auditing for the SQL server/PowerShell/README.md 5 Remediation scripts/Enable auditing for the SQL server/README.md 10 Remediation scripts/Enable the built-in vulnerability assessment solution on ARC virtual machines (powered by Qualys)/Azure Policy/deploy-qualys-va.json 81 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)/Azure Policy/deploy-qualys-va.json 82 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)/Logic App/README.md 18 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)/Logic App/azuredeploy.json 459 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines (powered by Qualys)/PowerShell/README.md 18 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/Logic App/README.md 28 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/Logic App/template.json 462 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/PowerShell/Windows/README.md 18 Remediation scripts/Enable the built-in vulnerability assessment solution on virtual machines/README.md 17 Remediation scripts/Enable transparent data encryption on SQL databases/Azure Policy - deployIfNotExists/README.md 9 Remediation scripts/Enable transparent data encryption on SQL databases/Azure Policy - deployIfNotExists/azuredeploy.json 94 Remediation scripts/Enable transparent data encryption on SQL databases/Logic App/README.md 6 Remediation scripts/Enable transparent data encryption on SQL databases/Logic App/azuredeploy.json 195 Remediation scripts/Enable transparent data encryption on SQL databases/PowerShell/README.md 8 Remediation scripts/Enable transparent data encryption on SQL databases/README.md 9 Remediation scripts/Endpoint protection solution should be installed on virtual machine scale sets/Logic App/Enable-Endpoint-Protection-VMSS.json 836 Remediation scripts/Endpoint protection solution should be installed on virtual machine scale sets/Logic App/README.md 16 Remediation scripts/Endpoint protection solution should be installed on virtual machine scale sets/README.md 17 Remediation scripts/Endpoint protection solution should be installed on virtual machines/Logic App/Enable-Endpoint-Protection.json 836 Remediation scripts/Endpoint protection solution should be installed on virtual machines/Logic App/README.md 16 Remediation scripts/Endpoint protection solution should be installed on virtual machines/README.md 17 Remediation scripts/Function App should only be accessible over HTTPs/Azure Policy - deployIfNotExists/README.md 17 Remediation scripts/Function App should only be accessible over HTTPs/Azure Policy - deployIfNotExists/azuredeploy.json 70 Remediation scripts/Function App should only be accessible over HTTPs/Logic App/README.md 8 Remediation scripts/Function App should only be accessible over HTTPs/Logic App/azuredeploy.json 996 Remediation scripts/Function App should only be accessible over HTTPs/PowerShell/README.md 17 Remediation scripts/Function App should only be accessible over HTTPs/README.md 9 Remediation scripts/IP forwarding on your virtual machine should be disabled/Logic App/README.md 6 Remediation scripts/IP forwarding on your virtual machine should be disabled/Logic App/azuredeploy.json 419 Remediation scripts/IP forwarding on your virtual machine should be disabled/Powershell/README.md 13 Remediation scripts/IP forwarding on your virtual machine should be disabled/README.md 9 Remediation scripts/Install Monitring Agent on VMSS/Azure Policy - DeployIfNotExists/README.md 4 Remediation scripts/Install Monitring Agent on VMSS/Logic App/README.md 6 Remediation scripts/Install Monitring Agent on VMSS/Logic App/azuredeploy.json 612 Remediation scripts/Install Monitring Agent on VMSS/PowerShell/README.md 4 Remediation scripts/Install Monitring Agent on VMSS/README.md 10 Remediation scripts/Install monitoring agent on VMSS/Azure Policy - DeployIfNotExists/README.md 4 Remediation scripts/Install monitoring agent on VMSS/Logic App/README.md 6 Remediation scripts/Install monitoring agent on VMSS/Logic App/azuredeploy.json 612 Remediation scripts/Install monitoring agent on VMSS/PowerShell/README.md 4 Remediation scripts/Install monitoring agent on VMSS/README.md 10 Remediation scripts/Install monitoring agent on your machines/Logic App/README.md 2 Remediation scripts/Install monitoring agent on your machines/Logic App/azuredeploy.json 236 Remediation scripts/Install monitoring agent on your machines/PowerShell/README.md 21 Remediation scripts/Install monitoring agent on your machines/README.md 3 Remediation scripts/Managed identity should be used in function apps/Logic App/mdc-logicapp-MSI-template.json 181 Remediation scripts/Managed identity should be used in function apps/Logic App/readme.md 14 Remediation scripts/Managed identity should be used in function apps/README.md 10 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/Logic App/ASCRecommendation-EnableJIT.json 375 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/Logic App/Enable-JIT.json 324 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/Logic App/README.md 17 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/PowerShell/README.md 12 Remediation scripts/Management ports of virtual machines should be protected with just-in-time network access control/README.md 18 Remediation scripts/Only secure connections to your Redis Cache should be enabled/Logic App/README.md 17 Remediation scripts/Only secure connections to your Redis Cache should be enabled/Logic App/azuredeploy.json 473 Remediation scripts/Only secure connections to your Redis Cache should be enabled/README.md 11 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Azure Policy - deny/README.md 17 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Azure Policy - deny/azuredeploy.json 40 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Azure Policy - deployIfNotExists/README.md 17 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Azure Policy - deployIfNotExists/azuredeploy.json 121 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Logic App/README.md 17 Remediation scripts/Provision an Azure AD Administrator on SQL Server/Logic App/azuredeploy.json 253 Remediation scripts/Provision an Azure AD Administrator on SQL Server/PowerShell/README.md 11 Remediation scripts/Provision an Azure AD Administrator on SQL Server/README.md 19 Remediation scripts/README.md 19 Remediation scripts/Remove External Accounts/README.md 10 Remediation scripts/Remove deprecated accounts from subscriptions/README.md 10 Remediation scripts/Require secure transfer to storage account/Azure Policy - Deny/Deny Policy.json 27 Remediation scripts/Require secure transfer to storage account/Azure Policy - Deny/README.md 8 Remediation scripts/Require secure transfer to storage account/Azure Policy - DeployIfNotExists/README.md 8 Remediation scripts/Require secure transfer to storage account/Azure Policy - DeployIfNotExists/azuredeploy.json 70 Remediation scripts/Require secure transfer to storage account/Logic App/README.md 14 Remediation scripts/Require secure transfer to storage account/Logic App/azuredeploy.json 339 Remediation scripts/Require secure transfer to storage account/PowerShell/README.md 4 Remediation scripts/Require secure transfer to storage account/README.md 9 Remediation scripts/Restrict access to App Services/PowerShell/README.md 25 Remediation scripts/Restrict access to App Services/README.md 10 Remediation scripts/Restrict access to storage accounts with firewall and virtual network configurations/PowerShell/README.md 29 Remediation scripts/Restrict access to storage accounts with firewall and virtual network configurations/README.md 10 Remediation scripts/Storage Account - Deny Network Access DefaultAction/Logic App/README.md 24 Remediation scripts/Storage Account - Deny Network Access DefaultAction/Logic App/azuredeploy.json 417 Remediation scripts/Storage Account - Deny Network Access DefaultAction/README.md 11 Remediation scripts/Storage Account - Disable Blob Public Access/Logic App/README.md 24 Remediation scripts/Storage Account - Disable Blob Public Access/Logic App/azuredeploy.json 415 Remediation scripts/Storage Account - Disable Blob Public Access/README.md 11 Remediation scripts/Storage Account - Disable Public Network Access/Logic App/README.md 24 Remediation scripts/Storage Account - Disable Public Network Access/Logic App/azuredeploy.json 415 Remediation scripts/Storage Account - Disable Public Network Access/README.md 11 Remediation scripts/Storage Account - Enable Secure Transfer/Logic App/README.md 25 Remediation scripts/Storage Account - Enable Secure Transfer/Logic App/azuredeploy.json 424 Remediation scripts/Storage Account - Enable Secure Transfer/README.md 11 Remediation scripts/TLS should be updated to the latest version for function apps/Logic App/mdc-logicapp-LatestTLS-template.json 183 Remediation scripts/TLS should be updated to the latest version for function apps/Logic App/readme.md 14 Remediation scripts/TLS should be updated to the latest version for function apps/README.md 10 Remediation scripts/TLS should be updated to the latest version for web apps/Logic App/mdc-webapp-LatestTLS-template.json 183 Remediation scripts/TLS should be updated to the latest version for web apps/Logic App/readme.md 14 Remediation scripts/TLS should be updated to the latest version for web apps/README.md 10 Remediation scripts/The 'ClusterProtectionLevel' property to EncryptAndSign in Service Fabric should be set/Logic App/README.md 17 Remediation scripts/The 'ClusterProtectionLevel' property to EncryptAndSign in Service Fabric should be set/Logic App/azuredeploy.json 483 Remediation scripts/The 'ClusterProtectionLevel' property to EncryptAndSign in Service Fabric should be set/README.md 11 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/Azure Policy - DeployIfNotExists/README.md 5 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/Logic App/README.md 14 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/Logic App/azuredeploy.json 545 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/PowerShell/README.md 5 Remediation scripts/Vulnerability assessment should be enabled on your SQL managed instances/README.md 9 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/Azure Policy - DeployIfNotExists/README.md 5 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/Logic App/README.md 14 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/Logic App/azuredeploy.json 545 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/PowerShell/README.md 5 Remediation scripts/Vulnerability assessment should be enabled on your SQL servers/README.md 9 Remediation scripts/Web Application should only be accessible over HTTPS/Azure Policy - deny/README.md 17 Remediation scripts/Web Application should only be accessible over HTTPS/Azure Policy - deny/azuredeploy.json 47 Remediation scripts/Web Application should only be accessible over HTTPS/Azure Policy - deployIfNotExists/README.md 17 Remediation scripts/Web Application should only be accessible over HTTPS/Azure Policy - deployIfNotExists/azuredeploy.json 93 Remediation scripts/Web Application should only be accessible over HTTPS/Logic App/README.md 8 Remediation scripts/Web Application should only be accessible over HTTPS/Logic App/azuredeploy.json 1001 Remediation scripts/Web Application should only be accessible over HTTPS/PowerShell/README.md 17 Remediation scripts/Web Application should only be accessible over HTTPS/README.md 9 SECURITY.md 24 Secure Score/Get-SecureScoreData/azuredeploy2.json 28 Secure Score/PowerBI-SecureScoreReport/README.md 71 Secure Score/README.md 14 Secure Score/Send-SecureScoreBriefing/README.md 11 Security Recommendations/Custom Policies/AppService SCM Exposed to Public Internet/README.md 5 Security Recommendations/Custom Policies/AppService SCM Exposed to Public Internet/azurepolicy.json 107 Security Recommendations/Custom Policies/Require Linux VM to use SSH key authentication/Azure Policy - Deny/Deny Policy.json 6986 Security Recommendations/Custom Policies/Require Linux VM to use SSH key authentication/Azure Policy - Deny/README.md 8 Security Recommendations/Custom Policies/Require Linux VM to use SSH key authentication/README.md 14 Security Recommendations/Private preview recommendations/Require tag and its value/README.md 13 Security Recommendations/Private preview recommendations/Require tag and its value/azurepolicy.json 41 Security Recommendations/Private preview recommendations/Sensitive information types scanning should be enabled/Azure Policy - Audit/README.md 14 Security Recommendations/Private preview recommendations/Sensitive information types scanning should be enabled/Azure Policy - Audit/StorageSensitivityScan-Audit.json 42 Security Recommendations/Private preview recommendations/Sensitive information types scanning should be enabled/README.md 10 Security Recommendations/README.md 14 Simulations/README.md 38 Terraform/Deploy Microsoft Defender for Cloud/README.md 2 Translate Recommendations/README.md 16 Workbooks/ARC deployment for multicloud/README.md 15 Workbooks/ASC Recommendations Graph/readme.md 9 Workbooks/ASCQualysDashboard/README.md 4 Workbooks/Azure Defender Active Alerts/readme.md 19 Workbooks/Azure Defender for Storage Price Estimation/ReadMe.md 2 Workbooks/CVE Dashboard/readme.md 18 Workbooks/Compute Security Dashboard/readme.md 19 Workbooks/Continuous Cloud Security Optimization Dashboard/KQLqueries.md 215 Workbooks/Continuous Cloud Security Optimization Dashboard/README.md 85 Workbooks/Defender CSPM Dashboard/readme.md 15 Workbooks/Defender for Cloud Coverage/readme.md 6 Workbooks/Defender for Cloud Onboarding/README.md 22 Workbooks/Defender for Containers Cost Estimation/readme.md 21 Workbooks/Defender for Servers Deployment Status/readme.md 16 Workbooks/Defender for Servers Monitoring/ReadMe.md 17 Workbooks/Governance Assignment Deletion/ReadMe.md 8 Workbooks/GuestConfiguration Result/readme.md 55 Workbooks/Microsoft Defender for App Services Price Estimation/ReadMe.md 28 Workbooks/Microsoft Defender for Key Vault Price Estimation/ReadMe.md 34 Workbooks/Microsoft Defender for Storage Price Estimation/ReadMe.md 12 Workbooks/Network Security Dashboard/ReadMe.md 48 Workbooks/OMI Vulnerability Dashboard/README.md 14 Workbooks/Policy Distribution Dashboard/Readme.md 26 Workbooks/README.md 46 Workbooks/Regulatory Compliance/readme.md 24 Workbooks/Regulatory Compliance/regulatorycompliance.workbook 383 Workbooks/Secure Score Gamification/readme.md 25 Workbooks/Secure Score by Groups/readme.md 21 Workbooks/Secure Score by Groups/secureScoreByGroups.workbook 721 Workbooks/Synack Vulnerabilities/ReadMe.md 13 Workbooks/Synack Vulnerabilities/SynackVulnerabilities.workbook 237 Workbooks/Vulnerability Scanner Unified Dashboard 1.0/README.md 26 Workbooks/WellArchitected Framework Security/readme.md 19 Workflow automation/Activity log Alerts for DDoS/ActivityLogAlertsForDDoS_Template.json 731 Workflow automation/Activity log Alerts for DDoS/readme.md 17 Workflow automation/Add-HostNameTagEC2Arc/README.md 17 Workflow automation/Add-HostNameTagEC2Arc/azuredeploy.json 210 Workflow automation/Add-PathAACPolicy/aac-custom-rbac-role.json 15 Workflow automation/Add-PathAACPolicy/azuredeploy.json 714 Workflow automation/Add-PathAACPolicy/readme.md 44 Workflow automation/Ask-Remove-MalwareBlob/archived/azuredeploy.json 236 Workflow automation/Ask-Remove-MalwareBlob/archived/cn/azuredeploy.json 232 Workflow automation/Ask-Remove-MalwareBlob/archived/readme.md 22 Workflow automation/Ask-Remove-MalwareBlob/archived/us/azuredeploy.json 232 Workflow automation/Ask-Remove-MalwareBlob/readme.md 3 Workflow automation/Assign-MDCRecommendationsbyAzureActivity/readme.md 13 Workflow automation/AttackPath-Sentinel-Incident-Enrich/azuredeploy.json 357 Workflow automation/AttackPath-Sentinel-Incident-Enrich/readme.md 39 Workflow automation/Audit Workflow Automation via policy/Workflow Automation for Azure Security Center Alerts Audit Policy/README.md 22 Workflow automation/Audit Workflow Automation via policy/Workflow Automation for Azure Security Center Alerts Audit Policy/WorkflowAutomationAlertsAuditPolicy.json 60 Workflow automation/Audit Workflow Automation via policy/Workflow Automation for Azure Security Center Recommendations Audit Policy/README.md 22 Workflow automation/Audit Workflow Automation via policy/Workflow Automation for Azure Security Center Recommendations Audit Policy/WorkflowAutomationRecommendationsAuditPolicy.json 60 Workflow automation/AzureSiteRecovery-RansomwareProtection/Readme.md 40 Workflow automation/AzureSiteRecovery-RansomwareProtection/azuredeploy.json 117 Workflow automation/Block-Suspicious-DNS-Activity/Readme.md 45 Workflow automation/BlockBruteforceAttack/Readme.md 45 Workflow automation/BlockSqlBruteforceAttack/Readme.md 17 Workflow automation/BlockSqlBruteforceAttack/azuredeploy.json 1377 Workflow automation/Configure Workflow Automation in scale via policy/Workflow Automation for Azure Security Center Alerts Policy/README.md 25 Workflow automation/Configure Workflow Automation in scale via policy/Workflow Automation for Azure Security Center Alerts Policy/WorkflowAutomationForASCAlertsPolicy.json 246 Workflow automation/Configure Workflow Automation in scale via policy/Workflow Automation for Azure Security Center Recommendations Policy/README.md 25 Workflow automation/Configure Workflow Automation in scale via policy/Workflow Automation for Azure Security Center Recommendations Policy/WorkflowAutomationForASCRecommendationsPolicy.json 282 Workflow automation/Configure-MDE/README.md 62 Workflow automation/Configure-MDE/Source/AuditIfNotExists.json 209 Workflow automation/Configure-MDE/Source/azuredeploy.json 630 Workflow automation/ContainerImageScanning_Notification/Readme.md 13 Workflow automation/Create-ExemptionsByResourceTag/Azuredeploy.json 307 Workflow automation/Create-ExemptionsByResourceTag/readme.md 20 Workflow automation/Create-MDEDeviceTagArc/README.md 31 Workflow automation/Create-MDEDeviceTagArc/azuredeploy.json 337 Workflow automation/Create-MDEDeviceTagAzure/README.md 34 Workflow automation/Create-MDEDeviceTagAzure/azuredeploy.json 518 Workflow automation/Create-SNOWCRfromASCRec/azuredeploy.json 135 Workflow automation/Create-SNOWCRfromASCRec/readme.md 9 Workflow automation/Create-SNOWIncfromASCAlert/azuredeploy.json 132 Workflow automation/Create-SNOWIncfromASCAlert/readme.md 9 Workflow automation/Create-SNOWVulnIncident/azuredeploy.json 568 Workflow automation/Create-SNOWVulnIncident/readme.md 9 Workflow automation/Defender for API/API-MGMT-Min-API-Version-2019-12-01-or-Higher/Readme.md 16 Workflow automation/Defender for API/API-MGMT-Min-API-Version-2019-12-01-or-Higher/azuredeploy.json 188 Workflow automation/Defender for API/APIs-should-use-Encrypted-protocols/Readme.md 1 Workflow automation/Defender for API/APIs-should-use-Encrypted-protocols/azuredeploy.json 211 Workflow automation/Defender for API/Backend-nobypass-certificate/Readme.md 19 Workflow automation/Defender for API/Backend-nobypass-certificate/azuredeploy.json 192 Workflow automation/Defender for API/Disable-public-access-to-the-service-configuration-endpoints/Readme.md 19 Workflow automation/Defender for API/Disable-public-access-to-the-service-configuration-endpoints/azuredeploy.json 125 Workflow automation/Defender for API/Disable-unused-Endpoints/Readme.md 19 Workflow automation/Defender for API/Disable-unused-Endpoints/azuredeploy.json 100 Workflow automation/Defender for API/Readme.md 12 Workflow automation/Defender for API/Scoped-to-all-APIs/Readme.md 19 Workflow automation/Defender for API/Scoped-to-all-APIs/azuredeploy.json 271 Workflow automation/Delete Blob LogicApp Defender for Storage/ReadMe.md 18 Workflow automation/Delete Blob LogicApp Defender for Storage/template.json 113 Workflow automation/Disable-AAD-Account-Revoke-Tokens/README.md 49 Workflow automation/Enable-ASCJITVM/azuredeploy.json 240 Workflow automation/Enable-ASCJITVM/azuredeploygov.json 240 Workflow automation/Enable-ASCJITVM/readme.md 10 Workflow automation/Enable-MDETVM/azuredeploy.json 216 Workflow automation/Enable-MDETVM/readme.md 5 Workflow automation/Enable-NSG-OnSubnet/azureDeploy.json 476 Workflow automation/Enable-NSG-OnSubnet/exampleRules.json 30 Workflow automation/Enable-NSG-OnSubnet/readme.md 37 Workflow automation/Export-ASCDataToEventHub/azuredeploy.json 640 Workflow automation/Export-ASCRecommendationsToCSV/README.md 14 Workflow automation/Export-ASCRecommendationsToCSV/azuredeploy.json 361 Workflow automation/Export-ComplianceData/azuredeploy.json 392 Workflow automation/Extend-AlertSuppressionRulesAboutToExpire/readme.md 41 Workflow automation/Install-VulnAssesmentAgent/azuredeploy.json 216 Workflow automation/Install-VulnAssesmentAgent/readme.md 9 Workflow automation/Isolate-ASCAlertAzureVM/readme.md 14 Workflow automation/Isolate-MDATPMachineAlert/azuredeploy.json 155 Workflow automation/Isolate-MDATPMachineAlert/readme.md 9 Workflow automation/Jira-Service-Management-Request-Connector/azuredeploy.json 294 Workflow automation/Jira-Service-Management-Request-Connector/readme.md 218 Workflow automation/Move Malicious Blob FunctionApp Defender for Storage/ReadMe.md 11 Workflow automation/Notify-ASCAlertsAzureResource/README.md 13 Workflow automation/Notify-ASCAlertsAzureResource/azuredeploy.json 336 Workflow automation/Notify-ASCAlertsbyAzureActivity/README.md 12 Workflow automation/Notify-ASCAlertsbyAzureActivity/azuredeploy.json 277 Workflow automation/Notify-ASCRecommendationsAzureResource/azuredeploy.json 336 Workflow automation/Notify-ASCRecommendationsAzureResource/readme.md 13 Workflow automation/Notify-ASCRecommendationsResourceTag/readme.md 12 Workflow automation/Notify-ASCRecommendationsbyAzureActivity/azuredeploy.json 284 Workflow automation/Notify-ASCRecommendationsbyAzureActivity/readme.md 12 Workflow automation/Notify-AzDefenderAlertIPEntity-GreyNoiseCommunity/readme.md 13 Workflow automation/Notify-MDCRecommendationChangeActivity/azuredeploy.json 492 Workflow automation/Notify-MDCRecommendationChangeActivity/readme.md 15 Workflow automation/Notify-NewAttackPath/readme.md 53 Workflow automation/Notify-ResourceExemption/azuredeploy.json 6161 Workflow automation/Notify-ResourceExemption/readme.md 30 Workflow automation/Notify-SQLVulnerabilityReport/readme.md 26 Workflow automation/Notify-StaleResources/readme.md 29 Workflow automation/Open-DevOpsTaskAlert/azuredeploy.json 130 Workflow automation/Open-DevOpsTaskAlert/readme.md 10 Workflow automation/Open-DevOpsTaskRecommendation/azuredeploy.json 132 Workflow automation/Open-DevOpsTaskRecommendation/readme.md 10 Workflow automation/Open-JIRA-Ticket/azuredeploy.json 146 Workflow automation/Open-JIRA-Ticket/readme.md 10 Workflow automation/Open-JIRAIssueAlert/azuredeploy.json 135 Workflow automation/Open-JIRAIssueAlert/readme.md 10 Workflow automation/Post-SlackMessage/azuredeploy.json 128 Workflow automation/Post-SlackMessage/readme.md 10 Workflow automation/Post-SlackMessageAlert/azuredeploy.json 127 Workflow automation/Post-SlackMessageAlert/readme.md 10 Workflow automation/Post-TeamsMessage/azuredeploy.json 135 Workflow automation/Post-TeamsMessage/readme.md 10 Workflow automation/Post-TeamsMessageAlert/azuredeploy.json 130 Workflow automation/Post-TeamsMessageAlert/readme.md 10 Workflow automation/Protect Azure VM Backup from Ransomware/Readme.md 92 Workflow automation/README.md 122 Workflow automation/Regulatory Compliance/ASC Regulatory Compliance.json 465 Workflow automation/Regulatory Compliance/readme.md 21 Workflow automation/Remove-KeyVault-AccessPolicies-RBACPermissions/azuredeploy.json 718 Workflow automation/Remove-KeyVault-AccessPolicies-RBACPermissions/readme.md 26 Workflow automation/Remove-MalwareBlob/archived/azuredeploy.json 126 Workflow automation/Remove-MalwareBlob/archived/cn/azuredeploy.json 126 Workflow automation/Remove-MalwareBlob/archived/readme.md 13 Workflow automation/Remove-MalwareBlob/archived/us/azuredeploy.json 126 Workflow automation/Remove-MalwareBlob/readme.md 3 Workflow automation/Request-ResourceExemption/azuredeploy.json 310 Workflow automation/Request-ResourceExemption/readme.md 34 Workflow automation/Run-MDATPAntivirus/azuredeploy.json 155 Workflow automation/Run-MDATPAntivirus/readme.md 9 Workflow automation/Secure Storage Remediation/SecureStorageRemediation_Template.json 624 Workflow automation/Secure Storage Remediation/readme.md 17 Workflow automation/Send-O365EmailRecommendation/azuredeploy.json 133 Workflow automation/Send-O365EmailRecommendation/readme.md 8 Workflow automation/SubscriptionManagement/Readme.md 30 Workflow automation/Sync-AzureVMTags-MDEDeviceTags/README.md 34 Workflow automation/Sync-AzureVMTags-MDEDeviceTags/azuredeploy.json 694 Workflow automation/Upgrade Pricing Tier/UpgradePricingTierForSubs_Template.json 373 Workflow automation/Upgrade Pricing Tier/readme.md 20 package-lock.json 985 package.json 38 tsconfig.json 21