DEMO Microsoft Antimalware for Azure Cloud Services and Virtual Machines скачать в хорошем качестве

DEMO Microsoft Antimalware for Azure Cloud Services and Virtual Machines

Microsoft Antimalware for Azure is a free real-time protection that helps identify and remove viruses, spyware, and other malicious software. It generates alerts when known malicious or unwanted software tries to install itself or run on your Azure systems. The solution is built on the same antimalware platform as Microsoft Security Essentials [MSE], Microsoft Forefront Endpoint Protection, Microsoft System Center Endpoint Protection, Microsoft Intune, and Microsoft Defender. Microsoft Antimalware for Azure is a single-agent solution for applications and tenant environments, designed to run in the background without human intervention. Protection may be deployed based on the needs of application workloads, with either basic secure-by-default or advanced custom configuration, including antimalware monitoring. When you deploy and enable Microsoft Antimalware for Azure for your applications, the following core features are available: Real-time protection - monitors activity in Cloud Services and on Virtual Machines to detect and block malware execution. Scheduled scanning - Scans periodically to detect malware, including actively running programs. Malware remediation - automatically takes action on detected malware, such as deleting or quarantining malicious files and cleaning up malicious registry entries. Signature updates - automatically installs the latest protection signatures (virus definitions) to ensure protection is up-to-date on a pre-determined frequency. Antimalware Engine updates – automatically updates the Microsoft Antimalware engine. Antimalware Platform updates – automatically updates the Microsoft Antimalware platform. Active protection - reports telemetry metadata about detected threats and suspicious resources to Microsoft Azure to ensure rapid response to the evolving threat landscape, as well as enabling real-time synchronous signature delivery through the Microsoft Active Protection System (MAPS). Samples reporting - provides and reports samples to the Microsoft Antimalware service to help refine the service and enable troubleshooting. Exclusions – allows application and service administrators to configure exclusions for files, processes, and drives. Antimalware event collection - records the antimalware service health, suspicious activities, and remediation actions taken in the operating system event log and collect them into the customer’s Azure Storage account. Microsoft antimalware workflow The Azure service administrator can enable Antimalware for Azure with a default or custom configuration for your Virtual Machines and Cloud Services using the following options: Virtual Machines – In the Azure portal, under Security Extensions Virtual Machines – Using the Visual Studio virtual machines configuration in Server Explorer Virtual Machines and Cloud Services – Using the Antimalware classic deployment model Virtual Machines and Cloud Services – Using Antimalware PowerShell cmdlets The Azure portal or PowerShell cmdlets push the Antimalware extension package file to the Azure system at a pre-determined fixed location. The Azure Guest Agent (or the Fabric Agent) launches the Antimalware Extension, applying the Antimalware configuration settings supplied as input. This step enables the Antimalware service with either default or custom configuration settings. If no custom configuration is provided, then the antimalware service is enabled with the default configuration settings. Once running, the Microsoft Antimalware client downloads the latest protection engine and signature definitions from the Internet and loads them on the Azure system. The Microsoft Antimalware service writes service-related events to the system OS events log under the “Microsoft Antimalware” event source. Events include the Antimalware client health state, protection and remediation status, new and old configuration settings, engine updates and signature definitions, and others. You can enable Antimalware monitoring for your Cloud Service or Virtual Machine to have the Antimalware event log events written as they are produced to your Azure storage account. The Antimalware Service uses the Azure Diagnostics extension to collect Antimalware events from the Azure system into tables in the customer’s Azure Storage account. Default and Custom Antimalware Configuration The default configuration settings are applied to enable Antimalware for Azure Cloud Services or Virtual Machines when you do not provide custom configuration settings. The default configuration settings have been pre-optimized for running in the Azure environment. Optionally, you can customize these default configuration settings as required for your Azure application or service deployment and apply them for other deployment scenarios. #paddyMaddy #azuretutorial #azuretraining #cloudComputing #microsoftazuretutorialforbeginners #azureforbeginners #azurebasics #microsoftazuretraining #Az900 #AZ500, #microsoftazurecertification, #AZ303 #AZ104