defender-for-containers
Installation
SKILL.md
Microsoft Defender for Containers
Defender for Containers is the Kubernetes-aware plan in Microsoft Defender for Cloud. It covers AKS, Azure Arc-enabled Kubernetes (on-prem, EKS, GKE, OpenShift), and the container registries that feed them, providing posture, image vulnerability assessment, runtime threat detection, and admission control.
When to use
Securing Kubernetes clusters and the registries that supply them. Use this skill for plan rollout, sensor vs agentless trade-offs, registry scanning, admission policy design, and runtime alert response.
Do not use this skill for VM/host hardening (defender-for-servers), cluster
networking design (azure-network-security-design), or generic AKS operations (azure-kubernetes).