Azure Defender real time check for Virus in a file

Question

Does Azure Defender provide real time scan for Virus for a file uploaded on Blob storage? I can see the threat but not sure when it runs ?

Does Azure defender scans on some schedule?

Answer 1

@Abdul Qadir

Unfortunately, Microsoft Defender for Storage do not provide real time scans.

Microsoft security researchers have analyzed the attack surface of storage services. Storage accounts can be subject to data corruption, exposure of sensitive content, malicious content distribution, data exfiltration, unauthorized access.

Below are the kind of alerts Microsoft defender for storage provides,

You can also refer to below article for more information.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-introduction#what-kind-of-alerts-does-microsoft-defender-for-storage-provide

Do let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi,

Unfortunately Microsoft Defender for Storage does not provide real time or scheduled or on-demand scanning of files uploaded to Blob storage. It doesn't access the data in the storage account. It looks at the telemetry for anything suspicious. For example, it looks at hashes of uploaded files to see if they match ones that are known to be malicious.

The article below has more specific details:

Overview of Microsoft Defender for Storage

https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-introduction

Please click Accept Answer if the above was useful.

Thanks.

-TP