This capability provides
comprehensive vulnerability assessment and remediation for container images,
regardless of their registry source. With this, organizations expand
vulnerability assessment coverage to include running containers with images
from any registry (not restricted to supported registries).
Vulnerability
information powered by Microsoft Defender Vulnerability Management is added to
the cloud security graph for contextual risk,
calculation of attack paths, and hunting capabilities.
Container images are
collected from the runtime environment and scanned for vulnerabilities. Scanned
images include customer owned containers, Kubernetes add-ons, and third-party
tools running on the cluster. Runtime environment images are collected in an
agentless manner every 24 hours.
Learn more,