diff --git a/en/azure/securitycenter/auto-provisioning-enabled.md b/en/azure/securitycenter/auto-provisioning-enabled.md index 6794d7b08..9eb54f524 100644 --- a/en/azure/securitycenter/auto-provisioning-enabled.md +++ b/en/azure/securitycenter/auto-provisioning-enabled.md @@ -16,13 +16,13 @@ ## Detailed Remediation Steps -1. Log into the Microsoft Azure Management Console. -2. Select the "Search resources, services, and docs" option at the top and search for Security Center.
-3. On the "Security Center" page scroll down the left navigation panel and choose "Pricing and Settings."
-4. On the "Security Center - Pricing & settings" page, select the "Subscription" by clicking on the "Name."
-5. Under the "Settings - Pricing tier", click on the "Data Collection" options and if the "Auto Provisioning" is turned off then the "Automatic provisioning" of the monitoring agent is not enable.
-6. Repeat steps number 2 - 5 to verify other Azure accounts for "Auto Provisioning Enabled."
-7. Navigate to Security center, choose "Pricing and Settings", select the "Subscription" by clicking on the "Name" and click on the "Data Collection" options.
-8. On the "Settings - Data Collection" page, click on the "ON" option next to the "Auto Provisioning."
-9. On the "Settings - Data Collection" page, select the "Workspace configuration" and click on the "All Events" under the "Windows security events". Click on the "Save" button at the top to make the changes.
-10. Repeat steps number 7 - 9 to ensure that the data collection settings of the subscription have Auto Provisioning set to enabled.
+1. Log in to the Microsoft Azure Management Console. +2. Select the "Search resources, services, and docs" option at the top and search for "Microsoft Defender for Cloud".
+3. On the "Microsoft Defender for Cloud" page scroll down the left navigation panel and choose "Environment Settings".
+4. On the "Environment Settings" page, select the "Subscription" by clicking on its "Name".
+5. Under the "Settings" page, click on "Auto Provisioning"
+6. On the "Settings | Auto provisioning" page, if the "Log Analytics agent for Azure VMs" shows status as turned off, then the "Automatic provisioning" of the monitoring agent is not enabled.
+7. On the "Settings | Auto provisioning" page, turn the status "ON" for "Log Analytics agent for Azure VMs" by toggling it.
+8. To the right under "Configuration" click on "Edit configuration".
+9. On the "Extension deployment configuration" page, select the "Workspace configuration" and click on the "All Events" under the "Windows security events". Click on the "Apply" button to make the changes.
+10. Repeat step number 3 - 9 to ensure that the data collection settings of the subscription have Auto Provisioning set to enabled.
diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step2.png b/resources/azure/securitycenter/auto-provisioning-enabled/step2.png index f70c4856c..a47b64e4a 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step2.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step2.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step3.png b/resources/azure/securitycenter/auto-provisioning-enabled/step3.png index 35cb7296a..0afa159aa 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step3.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step3.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step4.png b/resources/azure/securitycenter/auto-provisioning-enabled/step4.png index 499c8e505..c9483c269 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step4.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step4.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step5.png b/resources/azure/securitycenter/auto-provisioning-enabled/step5.png index 2d769de38..46f104d5a 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step5.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step5.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step6.png b/resources/azure/securitycenter/auto-provisioning-enabled/step6.png new file mode 100644 index 000000000..187679d76 Binary files /dev/null and b/resources/azure/securitycenter/auto-provisioning-enabled/step6.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step7.png b/resources/azure/securitycenter/auto-provisioning-enabled/step7.png index 66bbf0dae..7c4417a3a 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step7.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step7.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step8.png b/resources/azure/securitycenter/auto-provisioning-enabled/step8.png index 2a07f1dd3..89dec3c93 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step8.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step8.png differ diff --git a/resources/azure/securitycenter/auto-provisioning-enabled/step9.png b/resources/azure/securitycenter/auto-provisioning-enabled/step9.png index 24c7e2591..a7d8bc8c1 100644 Binary files a/resources/azure/securitycenter/auto-provisioning-enabled/step9.png and b/resources/azure/securitycenter/auto-provisioning-enabled/step9.png differ