Use Windows Update for Business reports with Intune to monitor Windows update rollouts.
These reports require you to configure data collection from devices before the reports can display data about feature updates.
Windows 10 feature updates – Use two built-in reports that work together to gain a deep picture of update status and issues. Windows 10 update rings – Use a built-in report that's ready by default when you deploy update rings to your devices. To help you monitor and troubleshoot update deployments, Intune supports the following reporting options: For Linux, use third party antimalware solution.With Intune, you can deploy updates to Windows 10/11 devices by using policies for Update rings for Windows 10 and later and Feature updates for Windows 10 and later. Follow recommendations in Azure Security Center: "Compute & Apps" to ensure all endpoints are up to date with the latest signatures. Microsoft Antimalware will automatically install the latest signatures and engine updates by default. Understand Microsoft Antimalware for Azure Cloud Services and Virtual MachinesĨ.3: Ensure anti-malware software and signatures are updated Azure ID Use Azure Defender for Storage to detect malware uploaded to storage accounts. Pre-scan any files being uploaded to non-compute Azure resources, such as App Service, Data Lake Storage, Blob Storage, etc. Microsoft Antimalware is enabled on the underlying host that supports Azure services (for example, Azure App Service), however it does not run on your content. How to configure Microsoft Antimalware for Cloud Services and Virtual MachinesĨ.2: Pre-scan files to be uploaded to non-compute Azure resources Azure ID Also, use Azure Defender for Storage to detect malware uploaded to storage accounts. For Linux, use third party antimalware solution. Use Microsoft Antimalware for Azure Cloud Services and Virtual Machines to continuously monitor and defend your resources. 8.1: Use centrally managed anti-malware software Azure ID 
The most up-to-date Azure Security Benchmark is available here.Ĭontrol the installation, spread, and execution of malicious code at multiple points in the environment, while optimizing the use of automation to enable rapid updating of defense, data gathering, and corrective action.
0 kommentar(er)
