Which tool or service is responsible for vulnerability scanner in M365 defender suite for Endpoints, Identify, Apps, Office 365 and Data and how it works?

Question

Which tool or service is responsible for vulnerability scanner in M365 defender suite for Endpoints, Identify, Apps, Office 365 and Data and how it works?

Answer 1

Hi @Vinod Survase •

If I understand you question , the answer should be Microsoft Defender portal.

Below a microsoft article to get more details about what you can manage through this portal :

https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-defender-portal?view=o365-worldwide

---

Please don't forget to accept helpful answer

---

Answer 2

Hi @Vinod Survase , Microsoft Defender Vulnerability Management is the tool responsible for vulnerability scanning in the Microsoft 365 Defender suite. It is included with Microsoft Defender for Servers and uses built-in and agentless scanners to discover vulnerabilities and misconfigurations in near real-time. The vulnerability scanner included with Microsoft Defender for Cloud is powered by Qualys, which is one of the leading tools for real-time identification of vulnerabilities. The scanner extension works by monitoring your machines and providing recommendations to deploy the Qualys extension on your selected machine/s. The extension then collects artifacts and sends them for analysis in the Qualys cloud service in the defined region. Qualys' cloud service conducts the vulnerability assessment and sends its findings to Defender for Cloud, where the findings are available for review.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James