Part of Defender CSPM where you write graph queries, or start from templates, against the cloud security graph to ask about inventory, internet exposure or OS; it searches what is already known rather than scanning or capturing traffic.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Cloud security explorer in context, with comparison tables and the common traps.
Terms in this definition
- Defender CSPM
Defender for Cloud's paid posture tier. On top of the free foundations it brings agentless scanning, attack path analysis, AI security posture management and the cloud security explorer.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- Cloud security graph
Context engine in Defender for Cloud that links inventory, exposure, permissions, vulnerabilities and lateral movement paths; attack path analysis and cloud security explorer both build on it, and Defender CSPM is required.
Related terms
- SBOM
A software bill of materials, listing every package and version in a codebase. Defender for Cloud's agentless code scanning (in preview) produces one for each repository, which Defender CSPM users can query in cloud security explorer.