microsoft-defender-for-cloud

M365 PowerShell scripts for Microsoft 365 administration: Intune, Entra ID, Defender, Exchange Online, Purview, Teams, SharePoint and tenant management. Microsoft Graph and modern modules only, read-only by default, -WhatIf on every change, full comment-based help.

A comprehensive framework leveraging custom GitHub Copilot agents, GitHub Advanced Security, and Microsoft Defender for Cloud to shift security and compliance left across security, accessibility, code quality, and FinOps domains with SARIF-based CI/CD integration.

Microsoft Defender for Cloud | Azure Security | Secure Score | CSPM | Workload Protection | Azure Security Engineer Portfolio

Terraform module: terraform-azurerm-security-center-storage-defender

Terraform module: terraform-azurerm-security-center-subscription-pricing

Terraform module: terraform-azurerm-security-center-assessment-policy

Terraform module: terraform-azurerm-security-center-contact

Multi-project GCP onboarding kit for Microsoft Defender for Cloud using Workload Identity Federation, with optional Defender for Servers.

Terraform module: terraform-azurerm-security-center-assessment

Terraform module: terraform-azurerm-security-center-workspace

Terraform module: terraform-azurerm-security-center-server-vulnerability-assessments-setting

Terraform module: terraform-azurerm-security-center-server-vulnerability-assessment-virtual-machine

Hands-on Azure lab demonstrating cloud security controls across identity, network, storage, and governance — with KQL-based log investigation and Microsoft Defender for Cloud monitoring. Includes architecture diagrams, evidence screenshots, and documented security validation tests.

Azure GRC evidence pipeline: Defender findings collected into an immutable Cosmos DB and WORM store, POA&M and SAR reports on timers, and Azure Policy remediation with a human approving each step. Terraform, NIST 800-53 and CSF 2.0.

Terraform module: terraform-azurerm-security-center-automation

Terraform module: terraform-azurerm-security-center-setting

A production-style Azure operations environment covering governance, monitoring, alerting, and security posture management. This project moves past deploying resources and into actually running them, watching them, and keeping them compliant the way a real cloud team would.

Hands-on Azure cloud security hardening lab demonstrating misconfiguration analysis, remediation, validation, NSG security, identity-based access, Microsoft Defender for Cloud, and Azure Policy enforcement.

This repository contains demos and guides on how to setup Defender for Cloud. These demos are intended as a guide. For official guidance, support, or more detailed information, please refer to Microsoft's official documentation or contact Microsoft directly.