ATP / Azure Security Center

Question

I'm trying to segment a resource group to be exempt from Azure Security Center / ATP while also have another that does have it so I can have proper testing. I found ways to exempt some resources individually from individual policies is there a better way to do this? Are there was to install / uninstall these agents individually instead of rolling it out all at once on the network?

Answer 1

@Rain

Thank you for reaching out to us.

I understand you want to test the capabilities of Azure Security Center. Azure Security Center deployment is based on the subscription not on Resource groups, however we can control the agent installation on the Azure VM's by navigating to this section and install the agent manually on the servers.

Reference: https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-data-collection?tabs=autoprovision-feature

Note: Azure Security Center and Azure Defender are now called Microsoft Defender for Cloud.

If you have any other questions, please let me know.

Thank you for your time.

----------

Please remember to "Accept Answer" if answer/reply helped, so that others in the community facing similar issues can easily find the solution.