MEDIUMCIS 2.11

Ensure auto-provisioning of Log Analytics agent is enabled

Log Analytics agent should be auto-provisioned on VMs for data collection.

Security Impact

Without agent, VM security data is not collected for analysis.

How to Remediate

Enable auto-provisioning of Log Analytics agent in Defender settings.

Affected Resources

Microsoft.Security/autoProvisioningSettings

Compliance Frameworks

CIS Azure v1.5.0SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your Azure environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Microsoft Defender for Cloud resources across your Azure subscriptions every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS Azure v1.5.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
azure-defender-12
Service
Microsoft Defender for Cloud
Category
Monitoring
Severity
MEDIUM
CIS Benchmark
2.11

Automate This Check

TigerGate automatically scans your Azure environment for this and 160+ other security checks.

Start Free Trial