efender for Storage Optional index tags for storing malware scanning results

General availability of Defender for Storage Optional index tags for storing malware scanning results
August 27, 2025

• Defender for Storage malware scanning introduces optional index tags for both on-upload and on-demand scans. With this new capability, users can choose whether to publish results to blob’s index tags when a blob is scanned (default) or to not use index tags. Index tags can be enabled or disabled at the subscription and storage account level through the Azure portal or via API.

General availability of Defender for Storage in Azure Government cloud
August 12, 2025

• Microsoft Defender for Storage is generally available to government cloud customers. The service helps U.S. federal and government agencies, secure their storage accounts. All features of Defender for Storage are available in government clouds, aligning the feature coverage with commercial cloud services. Learn more about Defender for Cloud's government cloud coverage.

General availability of Defender CSPM and Defender for Servers Plan 2 in Azure Government cloud
August 11, 2025

• Microsoft Defender for Cloud's Cloud Security Posture Management (CSPM) is generally available to government cloud customers. The service helps U.S. federal and government agencies, including the Department of Defense (DoD) and civilian agencies, manage cloud security posture and improve compliance.
  All features of Defender for Servers Plan 2's (P2) are available in government clouds, aligning the feature coverage with commercial cloud services.

AKS Security Dashboard
August 6, 2025

• The AKS Security Dashboard provides a centralized view of security posture and runtime threat protection for AKS cluster within the Azure portal. It highlights software vulnerabilities, compliance gaps, and active threats, helping you prioritize remediation. Use this dashboard to monitor AKS workload protection, cluster configuration, and threat detection in real time.

Storage aggregated logs in XDR's Advanced Hunting (Preview)
August 5, 2025

• The new CloudStorageAggregatedEvents table is now available in Microsoft Defender XDR’s Advanced Hunting experience. It brings aggregated storage activity logs, such as operations, authentication details, access sources, and success/failure counts, from Defender for Cloud into a single, queryable schema. The aggregation reduces noise, improves performance, and provides a high-level view of storage access patterns to support more effective threat detection and investigation.

The logs are available at no additional cost as part of the new per-storage account plan in Defender for Storage. For more information, visit CloudStorageAggregatedEvents (Preview).