Ensure that 'Agentless container vulnerability assessment' component status is 'On'

Why This Matters

Container images often contain known vulnerabilities that can be exploited if left unpatched. Without agentless vulnerability assessment, your Azure Container Registry images and Azure Kubernetes Service clusters remain exposed to undetected weaknesses, increasing the risk of a successful breach.

What Aether365 Checks

Aether365 verifies that the "Agentless container vulnerability assessment" component is enabled for each subscription in Microsoft Defender for Cloud. This check appears in the Aether365 dashboard under the azure-defender-for-cloud category.

Microsoft references

• Defender for containers introduction
• Enable data collection
• Mt704062
• Mt704063
• List
• Create
• Mcsb incident response