Back to Details

azure-defender-for-iot

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Defender For Iot Skill

Azure Defender For IoT 技能

This skill provides expert guidance for Azure Defender For Iot. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本技能为Azure Defender For IoT提供专业指导，涵盖故障排除、最佳实践、决策制定、架构与设计模式、限制与配额、安全防护、配置、集成与编码模式以及部署方面的内容。它结合了本地快速参考内容与远程文档获取能力。

How to Use This Skill

如何使用本技能

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
面向Agent的重要提示：使用下方的分类索引定位相关章节。对于带有行范围的分类（例如
L35-L120
），使用
read_file
并指定对应行。对于带有文件链接的分类（例如
[security.md](security.md)
），对链接的参考文件使用
read_file
面向Agent的重要提示：如果
metadata.generated_at
已超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户安装该工具：安装指南
本技能需要网络访问权限以获取文档内容：
  • 首选方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    并附带查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备用方式：使用
    fetch_webpage
    并附带查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL37-L48Diagnosing and fixing Defender for IoT micro agent and OT sensor issues, understanding/handling security and health alerts, and validating sensor/agent installation and configuration.
Best PracticesL49-L56Best practices for securing IoT/OT with Defender for IoT: using hub security recommendations, CIS benchmark guidance, and planning OT monitoring topology and sensor placement.
Decision MakingL57-L68Guidance on planning Defender for IoT deployments: choosing OT traffic mirroring, appliances, licenses, partner integrations, billing, hybrid/air-gapped setups, and on-premises to cloud transitions.
Architecture & Design PatternsL69-L75Architectural guidance for connecting OT/ICS sensors to Azure, using sample OT network topologies, and aligning Defender for IoT deployment with Purdue model layers.
Limits & QuotasL76-L84Info on OT trial setup, supported/retiring features, appliance catalog and requirements, and Defender for IoT data retention and storage limits.
SecurityL85-L103Securing Defender for IoT OT environments: auth, RBAC/roles, SSO, certificates, Zero Trust, alert workflows/response, and auditing user and programming activity.
ConfigurationL104-L135Configuring Defender for IoT agents/sensors: micro agent twins, dependencies, alerts, OT sensor settings, traffic mirroring, connectivity, monitoring methods, and threat intel updates.
Integrations & Coding PatternsL136-L163Integrating Defender for IoT with SIEMs, firewalls, ServiceNow, Sentinel, OT sensors, and micro agents, plus using APIs, playbooks, and workbooks to automate alerts and manage inventory/vulnerabilities.
DeploymentL164-L187Planning and deploying Defender for IoT OT sensors: hardware/VM options, appliance-specific guides, traffic mirroring, onboarding, activation, and moving IoT security resources across regions.
分类行范围描述
故障排除L37-L48诊断并修复Defender for IoT微代理和OT传感器问题，理解/处理安全和健康警报，验证传感器/代理的安装与配置。
最佳实践L49-L56使用Defender for IoT保障IoT/OT安全的最佳实践：利用中心安全建议、CIS基准指南，规划OT监控拓扑和传感器部署位置。
决策制定L57-L68Defender for IoT部署规划指导：选择OT流量镜像方式、设备、许可证、合作伙伴集成、计费方案、混合/离线环境设置，以及从本地到云端的过渡方案。
架构与设计模式L69-L75将OT/ICS传感器连接到Azure的架构指导，使用示例OT网络拓扑，使Defender for IoT部署与普渡模型层保持一致。
限制与配额L76-L84OT试用设置、支持/即将停用的功能、设备目录与要求，以及Defender for IoT数据保留和存储限制相关信息。
安全防护L85-L103保障Defender for IoT OT环境安全：身份验证、RBAC/角色、SSO、证书、零信任、警报工作流/响应，以及审计用户和编程活动。
配置L104-L135配置Defender for IoT代理/传感器：微代理孪生、依赖项、警报、OT传感器设置、流量镜像、连接性、监控方法，以及威胁情报更新。
集成与编码模式L136-L163将Defender for IoT与SIEM、防火墙、ServiceNow、Sentinel、OT传感器和微代理集成，以及使用API、剧本和工作簿自动化警报并管理资产/漏洞。
部署L164-L187规划并部署Defender for IoT OT传感器：硬件/VM选项、特定设备指南、流量镜像、注册、激活，以及跨区域迁移IoT安全资源。

Troubleshooting

故障排除

TopicURL
Use Defender micro agent security alerts and remediation guidancehttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-agent-based-security-alerts
Use Defender for IoT Hub built-in and custom alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-security-alerts
Use ThreadX Defender micro agent alerts and recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-threadx-security-alerts-recommendations
Troubleshoot Microsoft Defender for IoT micro agent issueshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/troubleshoot-defender-micro-agent
Investigate and remediate Defender for IoT security alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-investigate-security-alerts
Troubleshoot Microsoft Defender for IoT OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-troubleshoot-sensor
Validate Defender for IoT OT sensor installation healthhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/post-install-validation-ot-software
Interpret Defender for IoT sensor health messageshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/sensor-health-messages
主题链接
使用Defender微代理安全警报和修复指南https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-agent-based-security-alerts
使用Defender for IoT Hub内置和自定义警报https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-security-alerts
使用ThreadX Defender微代理警报和建议https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-threadx-security-alerts-recommendations
排查Microsoft Defender for IoT微代理问题https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/troubleshoot-defender-micro-agent
调查并修复Defender for IoT安全警报https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-investigate-security-alerts
排查Microsoft Defender for IoT OT传感器问题https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-troubleshoot-sensor
验证Defender for IoT OT传感器安装健康状态https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/post-install-validation-ot-software
解读Defender for IoT传感器健康消息https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/sensor-health-messages

Best Practices

最佳实践

TopicURL
Apply Defender for IoT Hub security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-recommendations
Investigate CIS benchmark-based Defender recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-investigate-cis-benchmark
Plan OT monitoring topology with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/plan-corporate-monitoring
Prepare OT sites and sensor placement for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/plan-prepare-deploy
主题链接
应用Defender for IoT Hub安全建议https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-recommendations
调查基于CIS基准的Defender建议https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-investigate-cis-benchmark
使用Defender for IoT规划OT监控拓扑https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/plan-corporate-monitoring
为Defender for IoT准备OT站点和传感器部署位置https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/plan-prepare-deploy

Decision Making

决策制定

TopicURL
Choose OT traffic mirroring methods for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/traffic-mirroring-methods
Decide on OT traffic mirroring methods for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/traffic-mirroring-methods
Plan Defender for IoT billing and licensinghttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/billing
Choose and plan Defender for IoT partner integrationshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrate-overview
Choose and extend Defender for IoT licenseshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/license-and-trial-license-extention
Select appropriate OT appliances for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-appliance-sizing
Plan hybrid or air-gapped Defender for IoT deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/air-gapped-deploy
Transition Defender for IoT from on-premises to cloudhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/transition-on-premises-management-console-to-cloud
主题链接
为Defender for IoT选择OT流量镜像方式https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/traffic-mirroring-methods
为Defender for IoT确定OT流量镜像方式https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/traffic-mirroring-methods
规划Defender for IoT计费和许可证https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/billing
选择并规划Defender for IoT合作伙伴集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrate-overview
选择并扩展Defender for IoT许可证https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/license-and-trial-license-extention
为Defender for IoT选择合适的OT设备https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-appliance-sizing
规划混合或离线Defender for IoT部署https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/air-gapped-deploy
将Defender for IoT从本地迁移到云端https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/transition-on-premises-management-console-to-cloud

Architecture & Design Patterns

架构与设计模式

TopicURL
Select architectures to connect OT sensors to Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/architecture-connections
Use sample OT network connectivity models for sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/sample-connectivity-models
Map Defender for IoT to Purdue OT architecturehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/understand-network-architecture
主题链接
选择将OT传感器连接到Azure的架构https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/architecture-connections
使用传感器的示例OT网络连接模型https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/sample-connectivity-models
将Defender for IoT映射到普渡OT架构https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/understand-network-architecture

Limits & Quotas

限制与配额

TopicURL
Understand Defender for IoT feature support and retirement timelineshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/edge-security-module-deprecation
Set up Defender for IoT OT trial planhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/getting-started
Review catalog of preconfigured OT monitoring applianceshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-pre-configured-appliances
System requirements for Defender for IoT OT virtual applianceshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-virtual-appliances
Understand Defender for IoT data retention limitshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/references-data-retention
主题链接
了解Defender for IoT功能支持和停用时间表https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/edge-security-module-deprecation
设置Defender for IoT OT试用计划https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/getting-started
查看预配置OT监控设备目录https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-pre-configured-appliances
Defender for IoT OT虚拟设备的系统要求https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-virtual-appliances
了解Defender for IoT数据保留限制https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/references-data-retention

Security

安全防护

TopicURL
Manage OT sensor authentication via Defender for IoT APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-auth-apis
Meet SSL/TLS certificate requirements for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/certificate-requirements
Analyze OT programming events for suspicious changeshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-analyze-programming-details-changes
Manage Defender for IoT alerts in Azure portalhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-cloud-alerts
View and manage OT sensor alerts locallyhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-view-alerts
Assign Azure RBAC roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-portal
Manage on-premises users on OT network sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-sensor
Apply Zero Trust monitoring to OT networkshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/monitor-zero-trust
Create CA-signed SSL/TLS certificates for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/create-ssl-certificates
Use Defender for IoT security recommendations to reduce riskhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/recommendations
Investigate and respond to OT alerts in Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/respond-ot-alert
Map Azure RBAC roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-azure
Configure on-premises roles for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-on-premises
Configure SSO for Defender for IoT sensor consolehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/set-up-sso
Audit user activity in Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/track-user-activity
主题链接
通过Defender for IoT API管理OT传感器身份验证https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-auth-apis
满足OT传感器的SSL/TLS证书要求https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/best-practices/certificate-requirements
分析OT编程事件以发现可疑变更https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-analyze-programming-details-changes
在Azure门户中管理Defender for IoT警报https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-cloud-alerts
在本地查看和管理OT传感器警报https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-view-alerts
为Defender for IoT分配Azure RBAC角色https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-portal
在OT网络传感器上管理本地用户https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/manage-users-sensor
对OT网络应用零信任监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/monitor-zero-trust
为OT传感器创建CA签名的SSL/TLS证书https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/create-ssl-certificates
使用Defender for IoT安全建议降低风险https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/recommendations
在Azure中调查并响应OT警报https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/respond-ot-alert
为Defender for IoT映射Azure RBAC角色https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-azure
为Defender for IoT配置本地角色https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/roles-on-premises
为Defender for IoT传感器控制台配置SSOhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/set-up-sso
审计Microsoft Defender for IoT中的用户活动https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/track-user-activity

Configuration

配置

TopicURL
Configure custom security alerts for Azure IoT Hubhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-customizable-security-alerts
Configure Defender for IoT micro agent behavior via module twinhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-configuration
Meet Linux dependency requirements for Defender micro agenthttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-linux-dependencies
Configure PAM on Linux to audit sign-in events for Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/configure-pam-to-audit-sign-in-events
Configure DMI decoder and alternatives for Defender micro agenthttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-dmi-decoder
Configure Defender for IoT micro agent twin propertieshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-micro-agent-twin
Configure Defender micro agent for Eclipse ThreadX deviceshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-threadx-security-module
Create and assign custom Defender for IoT device alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/quickstart-create-custom-alerts
Configure Microsoft Defender for IoT agent-based solutionhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-configure-agent-based-solution
Create Defender for IoT micro agent module twinhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-create-micro-agent-module-twin
Use Defender for IoT OT sensor CLI commandshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/cli-ot-sensor
Configure active monitoring methods for OT networkshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-active-monitoring
Set up reverse DNS lookup for OT active monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-reverse-dns-lookup
Configure OT sensor settings centrally from Azure portalhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-sensor-settings-portal
Configure Windows Endpoint Monitoring for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-windows-endpoint-monitoring
Configure OT sensor proxy connectivity to Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/connect-sensors
Use local script to enrich Windows endpoint datahttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/detect-windows-endpoints-script
Import supplemental OT device data into sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-import-device-information
Maintain individual OT sensors via sensor consolehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-individual-sensors
Configure SNMP MIB monitoring for OT sensor healthhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-set-up-snmp-mib-monitoring
Manage threat intelligence package updates on OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-work-with-threat-intelligence-packages
Apply networking requirements for Defender for IoT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/networking-requirements
Allow OT sensor connectivity to Azure endpointshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/provision-cloud-management
Configure ERSPAN on Cisco for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-erspan
Configure ESXi vSwitch promiscuous mode for mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-esxi
Configure Hyper-V vSwitch promiscuous mode for mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-hyper-v
Configure Cisco RSPAN mirroring for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-rspan
Configure Cisco SPAN port mirroring for OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-span
主题链接
为Azure IoT Hub配置自定义安全警报https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-customizable-security-alerts
通过模块孪生配置Defender for IoT微代理行为https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-configuration
满足Defender微代理的Linux依赖项要求https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/concept-micro-agent-linux-dependencies
在Linux上配置PAM以审计Defender的登录事件https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/configure-pam-to-audit-sign-in-events
为Defender微代理配置DMI解码器及替代方案https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-dmi-decoder
配置Defender for IoT微代理孪生属性https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-configure-micro-agent-twin
为Eclipse ThreadX设备配置Defender微代理https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-threadx-security-module
创建并分配自定义Defender for IoT设备警报https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/quickstart-create-custom-alerts
配置Microsoft Defender for IoT基于代理的解决方案https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-configure-agent-based-solution
创建Defender for IoT微代理模块孪生https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/tutorial-create-micro-agent-module-twin
使用Defender for IoT OT传感器CLI命令https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/cli-ot-sensor
为OT网络配置主动监控方法https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-active-monitoring
为OT主动监控设置反向DNS查找https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-reverse-dns-lookup
从Azure门户集中配置OT传感器设置https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-sensor-settings-portal
为OT传感器配置Windows端点监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/configure-windows-endpoint-monitoring
配置OT传感器到Azure的代理连接https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/connect-sensors
使用本地脚本丰富Windows端点数据https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/detect-windows-endpoints-script
将补充OT设备数据导入传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-import-device-information
通过传感器控制台维护单个OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-manage-individual-sensors
为OT传感器健康配置SNMP MIB监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-set-up-snmp-mib-monitoring
管理OT传感器上的威胁情报包更新https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-work-with-threat-intelligence-packages
应用Defender for IoT传感器的网络要求https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/networking-requirements
允许OT传感器连接到Azure端点https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/provision-cloud-management
为Defender for IoT在Cisco上配置ERSPANhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-erspan
为镜像配置ESXi vSwitch混杂模式https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-esxi
为镜像配置Hyper-V vSwitch混杂模式https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-hyper-v
为Defender for IoT配置Cisco RSPAN镜像https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-rspan
为OT传感器配置Cisco SPAN端口镜像https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/configure-mirror-span

Integrations & Coding Patterns

集成与编码模式

TopicURL
Provision Defender micro agent using IoT Hub DPS with X.509https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-provision-micro-agent
Use Defender micro agent API for Eclipse ThreadX integrationhttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/threadx-security-module-api
Integrate OT sensor alert management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-alert-apis
Integrate OT sensor inventory management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-inventory-apis
Use OT sensor vulnerability management APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-vulnerability-apis
Automate sensor disconnection alerts with Sentinel playbookshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/automate-sensor-disconnection-alerts
Forward OT sensor alerts to partner systemshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-forward-alert-information-to-partners
Integrate Defender for IoT with ArcSight SIEMhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/arcsight
Send Defender for IoT alerts to LogRhythmhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/logrhythm
Send Defender for IoT alerts to RSA NetWitnesshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/netwitness
Connect on-premises Defender for IoT to Sentinel (legacy)https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/on-premises-sentinel
Stream Defender for IoT cloud alerts to external SIEMshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/send-cloud-data-to-partners
Configure legacy ServiceNow integration for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/service-now-legacy
Use Sentinel solution to detect IoT threatshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-advanced-threat-monitoring
Connect Defender for IoT with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-solution
Access Defender for IoT data via REST APIshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/references-work-with-defender-for-iot-apis
Integrate CyberArk with Defender for IoT for credential securityhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-cyberark
Integrate Forescout with Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-forescout
Integrate Fortinet firewalls with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-fortinet
Integrate Palo Alto firewalls with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-palo-alto
Integrate IBM QRadar with Defender for IoT alertshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-qradar
Integrate ServiceNow Operational Technology Manager with Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-servicenow
Integrate Splunk with Microsoft Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-splunk
Visualize Defender for IoT data with Azure workbookshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/workbooks
主题链接
使用IoT Hub DPS和X.509证书预配Defender微代理https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-provision-micro-agent
使用Defender微代理API与Eclipse ThreadX集成https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/threadx-security-module-api
集成OT传感器警报管理APIhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-alert-apis
集成OT传感器资产管理APIhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-inventory-apis
使用OT传感器漏洞管理APIhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/api/sensor-vulnerability-apis
使用Sentinel剧本自动化传感器断开警报https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/automate-sensor-disconnection-alerts
将OT传感器警报转发到合作伙伴系统https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/how-to-forward-alert-information-to-partners
将Defender for IoT与ArcSight SIEM集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/arcsight
将Defender for IoT警报发送到LogRhythmhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/logrhythm
将Defender for IoT警报发送到RSA NetWitnesshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/netwitness
将本地Defender for IoT与Sentinel集成（旧版）https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/on-premises-sentinel
将Defender for IoT云警报流式传输到外部SIEMhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/send-cloud-data-to-partners
为Defender for IoT配置旧版ServiceNow集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/integrations/service-now-legacy
使用Sentinel解决方案检测IoT威胁https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-advanced-threat-monitoring
将Defender for IoT与Microsoft Sentinel连接https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/iot-solution
通过REST API访问Defender for IoT数据https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/references-work-with-defender-for-iot-apis
将CyberArk与Defender for IoT集成以保障凭据安全https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-cyberark
将Forescout与Microsoft Defender for IoT集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-forescout
将Fortinet防火墙与Defender for IoT集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-fortinet
将Palo Alto防火墙与Defender for IoT集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-palo-alto
将IBM QRadar与Defender for IoT警报集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-qradar
将ServiceNow Operational Technology Manager与Defender for IoT集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-servicenow
将Splunk与Microsoft Defender for IoT集成https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/tutorial-splunk
使用Azure工作簿可视化Defender for IoT数据https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/workbooks

Deployment

部署

TopicURL
Move Defender for IoT iotsecuritysolutions resource across regionshttps://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-region-move
Select OT monitoring appliances for Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/
Use Dell PowerEdge R350 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r350-e1800
Use Dell PowerEdge R360 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r360-e1800
Use Dell PowerEdge R660 for OT sensor deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r660
Deploy Heptagon YB3x appliance for OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/heptagon-yb3x
Use HPE DL20 Gen 11 (4SFF) for SMB OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11
Use HPE DL20 Gen 11 (NHP 2LFF) for SMB/L500 OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11-nhp-2lff
Use legacy HPE DL20 Gen10 for enterprise OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-legacy
Use HPE DL20 Gen10 Plus for enterprise OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-enterprise
Use HPE DL20 Gen10 Plus (NHP 2LFF) for SMB/L500 OThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-smb
Deploy Defender for IoT on HPE ProLiant DL360https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360
Deploy Defender for IoT on HPE ProLiant DL360 Gen 11https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360-gen11
Deploy OT sensor as Hyper-V Gen 2 virtual appliancehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-hyper-v
Deploy OT sensor as VMware ESXi virtual appliancehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-vmware
Deploy YS-techsystems YS-FIT2 for OT monitoringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/ys-techsystems-ys-fit2
Onboard OT sensors to Defender for IoT in Azurehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/onboard-sensors
Configure and activate Defender for IoT OT sensorshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/activate-deploy-sensor
Install and initially configure OT sensor softwarehttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/install-software-ot-sensor
Understand Defender for IoT OT deployment phaseshttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/ot-deploy-path
Deploy OT sensor with correct traffic mirroringhttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/set-up-traffic-mirroring
主题链接
跨区域迁移Defender for IoT iotsecuritysolutions资源https://learn.microsoft.com/en-us/azure/defender-for-iot/device-builders/how-to-region-move
为Defender for IoT选择OT监控设备https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/
使用Dell PowerEdge R350部署OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r350-e1800
使用Dell PowerEdge R360部署OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r360-e1800
使用Dell PowerEdge R660部署OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/dell-poweredge-r660
部署Heptagon YB3x设备用于OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/heptagon-yb3x
使用HPE DL20 Gen 11 (4SFF)进行SMB OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11
使用HPE DL20 Gen 11 (NHP 2LFF)进行SMB/L500 OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-gen-11-nhp-2lff
使用旧版HPE DL20 Gen10进行企业级OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-legacy
使用HPE DL20 Gen10 Plus进行企业级OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-enterprise
使用HPE DL20 Gen10 Plus (NHP 2LFF)进行SMB/L500 OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl20-plus-smb
在HPE ProLiant DL360上部署Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360
在HPE ProLiant DL360 Gen 11上部署Defender for IoThttps://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/hpe-proliant-dl360-gen11
将OT传感器部署为Hyper-V Gen 2虚拟设备https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-hyper-v
将OT传感器部署为VMware ESXi虚拟设备https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/virtual-sensor-vmware
部署YS-techsystems YS-FIT2用于OT监控https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/appliance-catalog/ys-techsystems-ys-fit2
在Azure中注册Defender for IoT OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/onboard-sensors
配置并激活Defender for IoT OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/activate-deploy-sensor
安装并初步配置OT传感器软件https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/install-software-ot-sensor
了解Defender for IoT OT部署阶段https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/ot-deploy/ot-deploy-path
使用正确的流量镜像部署OT传感器https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/traffic-mirroring/set-up-traffic-mirroring