defender-for-storage
Microsoft Defender for Storage
Defender for Storage protects Azure Blob Storage, Azure Files, and Azure Data Lake Storage Gen2 against malicious uploads, sensitive data exfiltration, and suspicious access patterns. The current generation is Defender for Storage v2, billed per storage account, with optional add-ons for on-upload malware scanning and sensitive data threat detection.
When to use
Protecting Azure Storage accounts that receive uploads from untrusted or partner sources, host application content (web apps, ML datasets), or contain sensitive data classified by Purview. Use this skill for plan rollout, malware-scan tuning, and incident response on storage alerts.
Do not use this skill for SQL/Cosmos data plane protection (defender-for-cloud-hardening),
VM disk-level malware (defender-for-servers), or M365 file workloads
(defender-for-office-365).