Microsoft Defender for Cloud
Cloud and workloadsAlerts Containers
In brief
The documentation now lists Malware detection and states that it detects malware running in the container.
What Defender admins need to know
Administrators can use this entry when reviewing and interpreting container security alerts.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
DNS-based detections: Identifies suspicious DNS activity generated by running containers, such as communication with known malicious domains.
Malware detection: Detects malware running in the container.
Kubernetes alerts simulation tool
Defender for Containers provides an open-source, Python-based CLI tool that simulates Kubernetes attack scenarios and helps you verify that Kubernetes security alerts are generated.
@@ -38,6 +38,8 @@ Key detection categories include: - **DNS-based detections:** Identifies suspicious DNS activity generated by running containers, such as communication with known malicious domains. +- **Malware detection:** Detects malware running in the container.+ ## Kubernetes alerts simulation tool Defender for Containers provides an open-source, Python-based CLI tool that simulates Kubernetes attack scenarios and helps you verify that Kubernetes security alerts are generated.