Note: To complete this lab, you will need an Azure subscription. in which you have administrative access.
The main goal of this exercise is to provide hands-on experience in configuring and enabling Microsoft Defender for Cloud within an Azure subscription. This will allow you to monitor and protect your cloud resources against security threats.
Skilling tasks
-
Upgrade your subscription for Microsoft Defender for Cloud.
-
Deploy the Microsoft Monitoring Agent to necessary machines for comprehensive coverage.
Exercise instructions
Upgrade Microsoft Defender for Cloud
-
Sign-in to the Azure portal menu.
-
In the Azure portal, in the Search resources, services, and docs text box at the top of the Azure portal page, type Microsoft Defender for Cloud and press the Enter key.
-
On the Microsoft Defender for Cloud, Getting started blade, go to the Upgrade tab. Scroll down until the Select subscriptions and workspaces to protect with enhanced security features section is visible.
-
Turn on the Microsoft Defender plan by selecting your Subscription and the Log Analytics Workspace you created in Module 02.
-
Click the large blue Upgrade button at the bottom of the page.
-
On the Microsoft Defender for Cloud, Getting started blade, go to the Install agents tab, and scroll down.
-
Check the box that is associated with the subscription on which agents will be installed, and click Install agents.
Alternative actions to upgrade your subscription for Microsoft Defender for Cloud.
-
Navigate to Microsoft Defender for Cloud and, in the left navigation panel under the Management section, click Environment Settings.
-
On the Microsoft Defender for Cloud, Environment settings blade, click Expand all, scroll down until your subscription appears, and click the relevant subscription.
-
On the Settings, Defender plans blade, select Enable all plans and click Save.
Results: You have upgraded and enabled Defender for Cloud on your Azure subscription.