security-configuration-monitoring.md

AZURE / Defender / Security Configuration Monitoring

Quick Info

Plugin Title	Security Configuration Monitoring
Cloud	AZURE
Category	Defender
Description	Ensures that Security Configuration Monitoring is enabled in Microsoft Defender.
More Info	When this setting is enabled, Microsoft Defender for Cloud will monitor virtual machines for security configurations.
AZURE Link	https://learn.microsoft.com/en-us/azure/governance/policy/overview
Recommended Action	Ensure Security Configuration Monitoring is configured for virtual machines from Microsoft Defender.

Detailed Remediation Steps

1. Log in to the Microsoft Azure Management Console.
2. Select the "Search resources, services, and docs" option at the top and search for "Microsoft Defender for Cloud".
   
3. Scroll down the left navigation panel and select "Environment Settings" under "Management".
   
4. On the "Microsoft Defender for Cloud | Environment settings" page, under the "Name" column, select the "Subscription Name" that needs to be verified by clicking on its Name.
   
5. On the "Settings" page, Defender Plans. Select the "Settings & Monitoring" Tab on the top.
   
6. On the "Settings | Defender plans" page, Navigate to the "Guest Configuration agent" plan.
   
7. Enable the "Guest Configuration agent" by toggling its Status to "On".
   
8. On the "Settings & Monitoring" Page, click on the "Continue" Button at the top.
   
9. On the "Settings | Defender plans" Page, click on the "Save" Button at the top.
   
10. Repeat steps 3 - 9 to ensure Security Configuration Monitoring is configured from Microsoft Defender for Cloud.