Cloud Security Rules

RULE	SERVICE GROUP
H Microsoft Defender for Cloud security alert notifications are disabled	Security Center
M Advanced Threat Protection is disabled on SQL server	Security Center
M App Service is not protected by Azure Defender	Security Center
M Auto provisioning of Microsoft Defender for Containers is disabled	Security Center
M Automatic provisioning of monitoring agent is disabled	Security Center
M Azure Defender is disabled for Azure Resource Manager (ARM)	Security Center
M Azure Defender is disabled for virtual machines	Security Center
M Azure Defender is disabled on Container Registry	Security Center
M Azure Defender is disabled on key vaults	Security Center
M Azure Defender is disabled on Kubernetes Service	Security Center
M Azure Defender is disabled on SQL server virtual machines	Security Center
M Azure Defender is disabled on SQL servers	Security Center
M Azure Defender is disabled on storage accounts	Security Center
M High severity security notifications disabled	Security Center
M Microsoft Cloud App Security (MCAS) integration in Security Center is disabled	Security Center
M Microsoft Defender for Cosmos DB is disabled	Security Center
M Microsoft Defender for DNS is disabled	Security Center
M Security Center contact email is not set	Security Center
M Security Center default policy setting 'Monitor Disk Encryption' is not enabled	Security Center
M Security Center default policy setting 'Monitor Endpoint Protection' is not enabled	Security Center
M Security Center default policy setting 'Monitor Network Security Groups' is not enabled	Security Center
M Security Center default policy setting 'Monitor OS Vulnerabilities' is not enabled	Security Center
M Security Center default policy setting 'Monitor SQL Auditing' is not enabled	Security Center
M Security Center default policy setting 'Monitor System Updates' is not enabled	Security Center
M Security Center default policy setting 'Monitor Vulnerability Assessment' is not enabled	Security Center
M Security Center default policy setting 'Monitor Web Application Firewall' should be enabled	Security Center
M Security Center default policy setting "Monitor Adaptive Application Whitelisting" is not enabled	Security Center
M Security Center default policy setting "Monitor JIT Network Access" is not enabled	Security Center
M Security Center default policy setting "Monitor SQL Encryption" is not enabled	Security Center
M Security Center default policy setting "Monitor Storage Blob Encryption" should be enabled	Security Center

AWS

Azure

Google

Kubernetes