How can I see a breakdown of the costs associated with each VM in Microsoft Defender for Cloud?

Is anyone else outraged about the 3x price increase for windows defender for server? I was expecting the Internet to be on fire about this. Instead there are crickets.

I am trying to calculate the costs of activating Defender for Cloud for Containers in our production environment. We already use Defender for Servers (plan 1) and Databases.

For containers we configured Falco but we also want to scan for vulnerabilities.

I don't really understand the cost calculation ($6.8693/VM core/Month). For example on one of our subscription we have: 2 container registries; 532 kubernetes cores

How much would it this be? Aproximatively

https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-github

The 'pricing' link in that article links to a page with pricing, however it seems to be focused on cloud resources (servers, containers, api's, etc). I'm not at all sure how that would map to GitHub resources?

I reached out to our MS contact and they pointed me to GitHub Advanced Security which is an entirely different class of product... and weeks later still nothing.

Was hoping someone here could point me to resources, or suggest some better search keywords because I'm turning up nothing ;-)

Hi, currently we have the basic Foundational CSPM MS Defender for Cloud plan enabled and also Defender CSPM. We would like to enable the Defender plan 2 for our Azure servers that costs around $15/Server/month. We have around 50 servers in our production subscription and would like to check if there is a way to configure this plan to include only a few of our critical severs for this plan and exclude the rest? We dont want to be billed for enabling this plan 2 on all our severs within our production subscription, so we are looking for some suggestion on how can we just enable this plan 2 on a few servers? Many thanks

We have a azure storage account Premium LRS that has close to a billion files coming in and out.

Now we have enabled on upload malware scanner, after scannig the defender is getting my file tag and updating them - these two tags are costing too much nearly same as of all other billion operations pls9u defender scan charges.

I want the scan to continue but blob tags update to be stopped, is there any way to do this.

I'm looking to get access to the advanced hunting interface in Microsoft Dedender that has all the enterprise tables available for querying endpoint data that's available with the Defender for Endpoint Plan 2.

What's the cheapest license I can get that will alow me to do this? I'm confused by Microsoft's add-on marketplace. It seems you can add-on plan 2 but im not sure of this is only compatible with certain licenses or not.

I'm interested in getting Defender on one host that isn't joined to a domain for educational purposes. I don't necessarily need my own AD infrastructure and what not.

Hey All,

Will do my best to make this as concise as possible - I am currently tasked with ensuring all of our azure based servers are protected by Anti Virus. ( I also totally appreciate there are levels to protection)

Licensing - Tenant has Defender for endpoint p2 and M365 e3 for licensing

Scenario - There are 2 servers (one is part of workgroup the other joined to domain) currently onboarded to MDE by a person no longer at the firm, The onboarding status is "onboarded" but MDE enrollment status is n/a and managed by is unknown , Which makes sense before neither of them are enrolled in Intune. Should the servers also be enrolled into Intune is the first question?

What I am struggling to ascertain is whether this now means those servers are protected enough if a threat got onto it or should I proceed with enabling the Defender for cloud plan(like below) and the server element of it or purchase a defender for server license?

I have been reading forums etc for the past day and a half and am hoping I can get some clarity/Guidance from here, I have a few other servers in our tenant that I would then need to address based on outcome here.

Thanks in advance.

HI,

So we had an audit and we failed it because our EDR didn't detect a virus.

We have been considering a new EDR for our cloud servers (in azure) so i wanted to ask, does Defender for cloud offer real-time protection as it does for endpoints?

I know it offers alerts and security recommendations but, does it work for real time protection? How can I activate it?

How can I use Microsoft Defender for Cloud to protect my VMs?

What are the features for VMs or what are the capacities for this kind of thing?

Give me your opinion.

Is anybody actually using this in production? The $15/month/app service seems expensive for what it does. To make matters worse I have to enable for ALL app services in a subscription.

I've been looking at Microsoft's docs, but I'm getting a bit confused. I want something that will both monitor my Azure virtual machines for malicious activity and deal with any malicious activity. Does Defender for endpoint, or Defender for Cloud fit the bill better? Thanks

Hi,

We are a small company which is moving fully to the cloud. We have 10 Windows servers hosted in Azure and would like to protect them with Defender.

So our MSP told us this only can be done by Defender for Cloud. Is this true?

How many hours will it take to have a basic configuration of Defender for Cloud? We will enroll the devices by our self.

We have already Defender for Endpoint for our Windows and iOS devices.

We are not to happy with our current MSP and their effort estimation are sometimes a little bit... Weird.

So any help will be appreciated.