🛡️ Azure Subscription Microsoft Defender continuous export is not configured🟢⚪
- Contextual name: 🛡️ Subscription Microsoft Defender continuous export is not configured🟢⚪
- ID:
/ce/ca/azure/subscription/microsoft-defender-continuous-export - Tags:
- Policy Type:
COMPLIANCE_POLICY - Policy Categories:
SECURITY
Stats
not available
Description
Description
Configuring an alert monitoring and response process ensures that alerts are actioned in a timely manner. Integrate with SIEM solutions like Microsoft Sentinel, or configure email/webhook notifications to security teams.
Rationale
Continuous monitoring and alert triage ensure that detected threats are acted upon quickly, reducing risk exposure.
Audit
This requirement needs manual assessment. Defender automation/export configuration, subscription-wide alert scope, and SIEM destination are not collected through a verified relationship.
Remediation
Remediation
Configuring an alert monitoring and response process ensures that alerts are actioned in a timely manner. Integrate with SIEM solutions like Microsoft Sentinel, or configure email/webhook notifications to security teams.
In Microsoft Defender for Cloud > Environment settings, select each subscription and open Continuous export. Enable export of at least Medium and High severity security alerts to the approved Log Analytics workspace, event hub, or both. Confirm that the destination feeds the security monitoring workflow and that exported alerts reach the responsible security team.
Automated assessment is unavailable: Defender automation/export configuration, subscription-wide alert scope, and SIEM destination are not collected through a verified relationship.
policy.yaml
Linked Framework Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CIS Azure v7.0.0 → 💼 8.1.12 Ensure Continuous Export of Microsoft Defender for Cloud alerts is configured to a SIEM (Manual) | 1 | no data | |||
| 💼 Cloudaware Framework → 💼 Alerting and Notification | 49 | no data |