Microsoft Azure Security Center, First Edition

Chapter 6 Advanced cloud defense

In this chapter, you will learn how Azure Security Center works to enable advanced threat protection not only for your Azure-situated assets but also for your on-premises deployments. To help you understand the overall threat landscape and what modern cybersecurity professionals have to deal with today, this chapter begins with a discussion on how preferences are changing from threat protection to threat detection (and why this is probably a good thing). It also covers methods of threat detection and how Azure Security Center uses them to catch attackers as early as possible. After that, the chapter looks at the cyber kill chain and how Azure Security Center uses this construct to assemble fusion alerts, which ...