Yes. Microsoft Defender for Cloud includes Microsoft Defender for Storage, a specific plan designed to detect anomalous activities and potential threats against Azure Storage accounts, such as malware uploads or access from suspicious IP addresses.

Yes. Foundational Cloud Security Posture Management (CSPM) capabilities are enabled by default and are free for all Azure subscriptions. These features provide a Secure Score and basic security recommendations to help strengthen cloud security posture.

Yes. Microsoft Defender for Cloud (formerly Azure Security Center) can extend its security posture management and threat protection to on-premises and other cloud environments. This is achieved by onboarding these non-Azure machines using Azure Arc.

Microsoft Corporation. (2024). Overview of Microsoft Defender for Storage. Microsoft Docs. Retrieved from https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-introduction. (This document confirms that Defender for Storage "detects unusual and potentially harmful attempts to access or exploit your storage accounts.")

Microsoft Corporation. (2024). Cloud Security Posture Management (CSPM). Microsoft Docs. Retrieved from https://docs.microsoft.com/en-us/azure/defender-for-cloud/concept-cloud-security-posture-management. (This source states, "The foundational CSPM capabilities in Defender for Cloud are free.")

Microsoft Corporation. (2024). Connect your non-Azure machines to Microsoft Defender for Cloud. Microsoft Docs. Retrieved from https://docs.microsoft.com/en-us/azure/defender-for-cloud/connect-on-premises-machines. (This article details the process of using Azure Arc to onboard on-premises servers for security evaluation by Defender for Cloud.)