Canal Secure Score looks healthy, yet there are no malware or stora…

Question

Canal Secure Score looks healthy, yet there are no malware or storage-threat alerts on the lock estate. What should the Azure security engineer enable so cloud workload threat protection actually runs?

Accepted Answer

Enable cloud workload protection plans such as Microsoft Defender for Servers, Defender for Databases, and Defender for Storage on the subscription — Pretty Secure Score with zero threat alerts means you polished the posture mirrors and never flipped the workload plans. Turn on Defender for Servers, Databases, and Storage—CSPM alone does not hunt malware on the canal estate.

Answer

Rely on foundational CSPM alone and assume Secure Score already includes malware and storage-threat alerts

Answer

Turn on Security Copilot agents instead of any Defender for Cloud workload plan

Answer

Enable only Microsoft Defender for Cloud Apps and treat that as Servers and Storage threat protection

Canal Secure Score looks healthy, yet there are no malware or storage-threat alerts on the lock estate. What should the Azure security engineer enable so cloud workload threat protection actually runs?

Short Explanation

Full Explanation