Implementing Microsoft Defender for Cloud for hybrid Windows servers

Microsoft Defender for Cloud is Microsoft’s Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) solution. We can use it to monitor and manage the security posture of hybrid Windows servers in on-premises environments.

In addition, we can implement Microsoft Sentinel, which provides a cloud-native SIEM and security orchestration, automation, and response (SOAR) solution for onboarded hybrid Windows servers.

When Defender for Cloud is enabled, the Log Analytics agent needs to be deployed to the machines; the agents then send data to a connected Log Analytics workspace. Defender for Cloud can then determine the security posture of the machines, applications, data, and networks and provide a secure score.

For Azure VMs, the Log Analytics agent is automatically provisioned by Defender for Cloud. For on-premises hybrid machines, the agent can be manually installed or automated...