Overview
The Microsoft Defender for Cloud app collects secure scores, security recommendations, attack paths, and regulatory compliance state from Azure through the Resource Graph API. It ranks recommendations by a risk score derived from severity, internet exposure, resource criticality, and attack path membership, and tracks how the posture changes over time.