{"id":2693,"date":"2025-09-17T23:43:16","date_gmt":"2025-09-17T20:43:16","guid":{"rendered":"https:\/\/www.jussimetso.com\/?p=2693"},"modified":"2025-09-18T00:01:51","modified_gmt":"2025-09-17T21:01:51","slug":"malware-automated-remediation-in-defender-for-storage","status":"publish","type":"post","link":"https:\/\/www.jussimetso.com\/index.php\/2025\/09\/17\/malware-automated-remediation-in-defender-for-storage\/","title":{"rendered":"Malware automated remediation in Defender for Storage"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div>\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2693\" class=\"elementor elementor-2693\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1f5d7dba elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1f5d7dba\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-20485cc1\" data-id=\"20485cc1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3502189 elementor-toc--minimized-on-tablet elementor-widget elementor-widget-table-of-contents\" data-id=\"3502189\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;,&quot;h3&quot;,&quot;h4&quot;,&quot;h5&quot;],&quot;exclude_headings_by_selector&quot;:[],&quot;no_headings_message&quot;:&quot;No headings were found on this page.&quot;,&quot;marker_view&quot;:&quot;numbers&quot;,&quot;minimize_box&quot;:&quot;yes&quot;,&quot;minimized_on&quot;:&quot;tablet&quot;,&quot;hierarchical_view&quot;:&quot;yes&quot;,&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTable of Contents\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__3502189\" aria-expanded=\"true\" aria-label=\"Open table of contents\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__3502189\" aria-expanded=\"true\" aria-label=\"Close table of contents\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__3502189\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64c7d0ec elementor-widget elementor-widget-text-editor\" data-id=\"64c7d0ec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\n<h2 class=\"wp-block-heading\">Updates for Malware scanning<\/h2>\n\n<p>A new feature for malware scanning in Defender for Storage is released (09\/17\/2025) to <strong>public preview<\/strong>.<\/p>\n\n<p>I&#8217;ll try to describe how to configure <strong>automated remediation<\/strong> when malware is detected in Azure Blob Storage using Microsoft Defender for Storage.<\/p>\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<p>Defender for Storage <strong>supports<\/strong> different ways to handle malicious files. Select the remediation option that fits your scenario:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Built-in remediation capabilities<\/li>\n\n<li>Automated workflows to move or remove malicious files<\/li>\n\n<li>Automated workflows to move or ingest clean files to another destination<\/li>\n<\/ul>\n\n<p>With malware scanning, build your automated remediation using these scan result options:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Defender for Cloud security alerts<\/li>\n\n<li>Event Grid events<\/li>\n\n<li>Blob index tags<\/li>\n<\/ul>\n<\/div><\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8575b4c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8575b4c\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-33c38be\" data-id=\"33c38be\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b7b2bef elementor-widget elementor-widget-heading\" data-id=\"b7b2bef\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Key Features &amp; Remediation Options<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57ae3a4 elementor-widget elementor-widget-text-editor\" data-id=\"57ae3a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul>\n<li data-start=\"522\" data-end=\"1157\">\n<p data-start=\"525\" data-end=\"586\"><strong data-start=\"525\" data-end=\"584\">Built-in remediation (\u201csoft delete\u201d of malicious blobs)<\/strong><\/p>\n<ul data-start=\"590\" data-end=\"1157\">\n<li data-start=\"590\" data-end=\"878\">\n<p data-start=\"592\" data-end=\"878\">When Defender for Storage detects a malicious blob (e.g. through on-upload or on-demand scanning), it can automatically soft-delete it (quarantine stage), meaning blob is removed from normal access but remains recoverable during retention period<\/p>\n<\/li>\n<li data-start=\"882\" data-end=\"1050\">\n<p data-start=\"884\" data-end=\"1050\">Soft delete must be enabled on the storage account (if not already) when turning on the \u201cSoft delete malicious blobs\u201d setting.<\/p>\n<\/li>\n<li data-start=\"1054\" data-end=\"1157\">\n<p data-start=\"1056\" data-end=\"1157\">Default retention is 7 days, configurable between 1\u2013365 days.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1159\" data-end=\"1598\">\n<p data-start=\"1162\" data-end=\"1373\"><strong data-start=\"1162\" data-end=\"1192\">Custom\/Workflow Automation<\/strong><br data-start=\"1192\" data-end=\"1195\" \/>For scenarios where built-in soft-delete is not enough or more control is needed, you can use workflow tools to delete, move, or quarantine malicious blobs. Options include:<\/p>\n<ul data-start=\"1377\" data-end=\"1598\">\n<li data-start=\"1377\" data-end=\"1478\">\n<p data-start=\"1379\" data-end=\"1478\">Logic Apps triggered by Defender for Cloud security alerts.<\/p>\n<\/li>\n<li data-start=\"1482\" data-end=\"1598\">\n<p data-start=\"1484\" data-end=\"1598\">Function Apps triggered by Event Grid events (low latency response).<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1600\" data-end=\"1980\">\n<p data-start=\"1603\" data-end=\"1637\"><strong data-start=\"1603\" data-end=\"1635\">Access controls &amp; quarantine<\/strong><\/p>\n<ul data-start=\"1641\" data-end=\"1980\">\n<li data-start=\"1641\" data-end=\"1828\">\n<p data-start=\"1643\" data-end=\"1828\">Use Azure RBAC (role-based access control) or Microsoft Entra ABAC to restrict access to blobs, especially those that are malicious or unscanned.<\/p>\n<\/li>\n<li data-start=\"1832\" data-end=\"1980\">\n<p data-start=\"1834\" data-end=\"1980\">Move malicious blobs to a dedicated \u201cquarantine\u201d storage container or account with restricted permissions.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li data-start=\"1982\" data-end=\"2433\">\n<p data-start=\"1985\" data-end=\"2012\"><strong data-start=\"1985\" data-end=\"2010\">Application awareness<\/strong><\/p>\n<ul data-start=\"2016\" data-end=\"2433\">\n<li data-start=\"2016\" data-end=\"2262\">\n<p data-start=\"2018\" data-end=\"2262\">Applications (or downstream data flows) can be made aware of scan results so that they process only clean files. For example, check blob index tags or wait for event-driven signals before consuming files.<\/p>\n<\/li>\n<li data-start=\"2266\" data-end=\"2433\">\n<p data-start=\"2268\" data-end=\"2433\">Use a staging (DMZ-like) storage account for untrusted files: only move into production once scanning says \u201cno threat found.\u201d<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/defender-for-storage-configure-malware-scan#feature-notes\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">Read more<\/span><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-de1779a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"de1779a\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1022f61\" data-id=\"1022f61\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8c754c1 elementor-widget elementor-widget-image\" data-id=\"8c754c1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"468\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_blob_info.png?fit=640%2C468&amp;ssl=1\" class=\"attachment-large size-large wp-image-2714\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_blob_info.png?w=682&amp;ssl=1 682w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_blob_info.png?resize=300%2C220&amp;ssl=1 300w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Blob soft delete needs to be enabled to use Defender for Storage built-in  remediation.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8f87a66 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8f87a66\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-88e4353\" data-id=\"88e4353\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d18bc2f elementor-widget elementor-widget-heading\" data-id=\"d18bc2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Malware scan remediation flow<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7e3b40 elementor-widget elementor-widget-image\" data-id=\"f7e3b40\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"640\" height=\"406\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?fit=640%2C406&amp;ssl=1\" class=\"attachment-large size-large wp-image-2710\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?w=1972&amp;ssl=1 1972w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?resize=300%2C190&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?resize=1024%2C650&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?resize=768%2C488&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?resize=1536%2C975&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?resize=850%2C540&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_scan_flow-1.png?w=1920&amp;ssl=1 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d46218 elementor-widget elementor-widget-text-editor\" data-id=\"0d46218\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Here&#8217;s a very\u00a0 simple remediation flow. Scan can be done automatically via malware scan or\u00a0 with automation.<\/p>\n<p>There are different options available (more than these two):<\/p>\n<ul>\n<li>the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/defender-for-storage-configure-malware-scan#option-1-logic-app-based-on-microsoft-defender-for-cloud-security-alerts\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">automation with Logic apps<\/span><\/a><\/li>\n<li>the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/defender-for-storage-configure-malware-scan#option-2-function-app-based-on-event-grid-events\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">automation with Function<\/span><\/a><\/li>\n<\/ul>\n<p>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e911143 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e911143\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c0935e4\" data-id=\"c0935e4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0dba14e elementor-widget elementor-widget-heading\" data-id=\"0dba14e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Set up Defender for Storage plan<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50b6fa5 elementor-widget elementor-widget-image\" data-id=\"50b6fa5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_plan\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjY5NiwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3BsYW4ucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"2311\" height=\"96\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?fit=2311%2C96&amp;ssl=1\" class=\"attachment-full size-full wp-image-2696\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?w=2311&amp;ssl=1 2311w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=300%2C12&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=1024%2C43&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=768%2C32&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=1536%2C64&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=2048%2C85&amp;ssl=1 2048w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?resize=850%2C35&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_plan.png?w=1920&amp;ssl=1 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Defender for Storage plan. Click to enlarge<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e31a5b0 elementor-widget elementor-widget-heading\" data-id=\"e31a5b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Settings for Defender for Storage<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8708079 elementor-widget elementor-widget-text-editor\" data-id=\"8708079\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Microsoft Defender for Storage detects threats on your storage workloads and data, including malicious access, data exfiltration of sensitive data and malware upload.<\/p>\n<div>\n<div data-bind=\"text: priceTitle\">\u00a0<\/div>\n<div class=\"msportalfx-font-bold\" data-bind=\"text: priceTitle\"><strong>Pricing:<\/strong><\/div>\n<div><span data-bind=\"sanitizedHtml: price\">$10\/Storage account\/month<br \/>$0.15\/GB scanned for On-Upload Malware Scanning\u00a0<span class=\"ext-ConfigureText\">(configurable)<\/span><strong>**<\/strong><\/span>\n<div id=\"_weave_e_784\" class=\"azc-dockedballoon-anchor\" tabindex=\"0\" role=\"button\" data-tabster=\"{&quot;uncontrolled&quot;: {&quot;completely&quot;: true}}\" aria-describedby=\"2efbf4f3-5147-4199-b965-d71be5ebf117\" aria-hidden=\"false\" aria-label=\"An overage charge will be applied to storage accounts with an exceptionally high transaction volume.&lt;br\/&gt;&lt;br\/&gt;Storage accounts that &lt;b&gt;exceed 73 million monthly transactions&lt;\/b&gt; will be charged &lt;b&gt;$0.1492 for every 1 million transactions&lt;\/b&gt; that exceed the threshold.&lt;br\/&gt;&lt;br\/&gt;&lt;a href=&quot;https:\/\/go.microsoft.com\/fwlink\/?linkid=2208717&quot; target=&quot;_blank&quot;&gt;Learn how to calculate your expected spend&lt;\/a&gt;\" aria-expanded=\"false\" aria-controls=\"azc-dockedballoon-balloon-azc-dockedballoon-balloon0-050\" aria-owns=\"azc-dockedballoon-balloon-azc-dockedballoon-balloon0-050\">\n<div id=\"_weave_e_785\" class=\"fxs-portal-svg-secondary azc-fill-hovered-heavy azc-dockedballoon-anchor-target\">\u00a0<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div data-bind=\"foreach: { data: features, as: 'item' }\">\n<ul>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Simple, one-click setup; no need to enable logs, agents, or rewiring<\/span><\/li>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Continuously analyzes data plane and control plane logs on Azure Blobs, Azure Data Lake Storage, and Azure Files<\/span><\/li>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Leverages Microsoft Threat Intelligence and behavioral models<\/span><\/li>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Generates context-based security alerts easily integrated with any SIEM<\/span><\/li>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Detects data exposure events with Sensitive Data Discovery (configurable)<\/span><\/li>\n<li><span data-bind=\"sanitizedHtml: item[0]\">Detects malicious files uploaded to Blob Storage with near real-time Malware Scanning (configurable)<\/span><\/li>\n<\/ul>\n<p><strong>**<\/strong> means:<\/p>\n<p>An overage charge will be applied to storage accounts with an exceptionally high<br \/>transaction volume.<\/p>\n<p>Storage accounts that <strong>exceed 73 million monthly transactions<\/strong> will be charged<br \/><strong>$0.1492 for every 1 million transactions<\/strong> that exceed the threshold.<\/p>\n<p><a href=\"https:\/\/techcommunity.microsoft.com\/blog\/microsoftdefendercloudblog\/microsoft-defender-for-storage-%e2%80%93-price-estimation-dashboard\/2429724\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">Learn how to calculate your expected spend<\/span><\/a><\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f03c741 elementor-widget elementor-widget-image\" data-id=\"f03c741\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_settings\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjY5OSwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3NldHRpbmdzLnBuZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"643\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?fit=640%2C643&amp;ssl=1\" class=\"attachment-large size-large wp-image-2699\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?w=1255&amp;ssl=1 1255w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?resize=300%2C301&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?resize=1019%2C1024&amp;ssl=1 1019w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?resize=150%2C150&amp;ssl=1 150w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?resize=768%2C772&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_settings.png?resize=850%2C854&amp;ssl=1 850w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Defender for storage settings (from Azure). Click to enlarge.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5229843 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5229843\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6d5aebd\" data-id=\"6d5aebd\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-357f21d elementor-widget elementor-widget-text-editor\" data-id=\"357f21d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>I have described the selections I made in the setup.<\/p>\n<p><strong>1. Advanced settings<\/strong><\/p>\n<p>Use Override Defender for Storage subscription-level settings to set configurations that are different from the subscription. This can also allow you to disable Defender for<br \/>Storage on the storage account.<\/p>\n<p><strong>2. Sensitive data threat detection<\/strong><\/p>\n<p>Sensitive Data Discovery automatically discovers managed cloud data resources containing sensitive data at scale. It is agentless and uses smart sampling scanning, integrated with <strong>Microsoft Purview sensitive information types and labels<\/strong>. The feature accesses your data and requires you to have the appropriate permissions to enable it.<\/p>\n<p><a href=\"https:\/\/learn.microsoft.com\/fi-fi\/azure\/defender-for-cloud\/support-matrix-defender-for-storage?WT.mc_id=Portal-Microsoft_Azure_Security#permissions\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">Read more<\/span><\/a><\/p>\n<p><strong>3. on-upload malware scanning<\/strong><\/p>\n<p>Malware Scanning detects malicious files uploaded to Blob Storage using near real-time agentless Malware Scanning. The feature accesses your data and requires you to<br \/>have the appropriate permissions to enable it.\u00a0<\/p>\n<p><a href=\"https:\/\/learn.microsoft.com\/fi-fi\/azure\/defender-for-cloud\/support-matrix-defender-for-storage?WT.mc_id=Portal-Microsoft_Azure_Security#prerequisites\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">Read more<\/span><\/a><\/p>\n<p><strong>4. Set limit of GB scanned per month<\/strong><\/p>\n<p>Use this setting to set a cap on GB scanned per month by Malware Scanning to control costs. After crossing this limit (with up to 20GB deviation) in a single calendar month,<br \/>files will not be scanned for malware.<\/p>\n<p><strong>5. Filter on-upload scans<\/strong><\/p>\n<p>Up to 24 filter values in total can be used to exclude blobs from malware scanning, covering prefix, suffix, and size filters (size filter counts as one value when used). The<br \/>filters use OR logic, so a blob is excluded if it meets any one of the specified criteria.<\/p>\n<p><strong>6. Soft delete malicious blobs (preview)<\/strong><\/p>\n<p>When enabled, blobs detected as malicious will be soft deleted. <strong>Soft deleted blobs are recoverable<\/strong>. If soft delete isn&#8217;t already enabled on the storage account, Defender for Storage will attempt to enable it automatically &#8211; but only during the initial activation of the automatic response feature. (preview)<\/p>\n<p><strong>7. Send scan results to Log Analytics (preview)<\/strong><\/p>\n<p>Store every scan result in a centralized log repository which is easy to query by setting up Log Analytics Workspace destination. Additional charges apply.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ee45517 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ee45517\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-871cce2\" data-id=\"871cce2\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5d641d7 elementor-widget elementor-widget-heading\" data-id=\"5d641d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Testing the automated remediation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5290775 elementor-widget elementor-widget-text-editor\" data-id=\"5290775\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>I uploaded six files to my just created storage account which I had enabled settings above. The results were:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-760f672 elementor-widget elementor-widget-image\" data-id=\"760f672\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_scan_results\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjcwNCwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3NjYW5fcmVzdWx0cy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"365\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?fit=640%2C365&amp;ssl=1\" class=\"attachment-large size-large wp-image-2704\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?w=1920&amp;ssl=1 1920w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?resize=300%2C171&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?resize=1024%2C584&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?resize=768%2C438&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?resize=1536%2C876&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?resize=850%2C485&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results.png?w=1280&amp;ssl=1 1280w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Defender for Storage scan results (from Azure). Click to enlarge.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-040dd0a elementor-widget elementor-widget-text-editor\" data-id=\"040dd0a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Security alert was raised as expected and <span style=\"text-decoration: underline;\">automatically deleted<\/span> also as expected<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-49d4647 elementor-widget elementor-widget-image\" data-id=\"49d4647\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_scan_alert1\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjcwNiwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3NjYW5fYWxlcnQxLXNjYWxlZC5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"47\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?fit=640%2C47&amp;ssl=1\" class=\"attachment-large size-large wp-image-2706\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?w=2560&amp;ssl=1 2560w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=300%2C22&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=1024%2C75&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=768%2C56&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=1536%2C112&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=2048%2C149&amp;ssl=1 2048w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?resize=850%2C62&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert1-scaled.png?w=1920&amp;ssl=1 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Security Alert in Defender for Storage section - Click to enlarge<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0fba212 elementor-widget elementor-widget-image\" data-id=\"0fba212\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_scan_alert\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjcwNywidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3NjYW5fYWxlcnQtMS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"143\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?fit=640%2C143&amp;ssl=1\" class=\"attachment-large size-large wp-image-2707\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?w=2514&amp;ssl=1 2514w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=300%2C67&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=1024%2C228&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=768%2C171&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=1536%2C342&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=2048%2C455&amp;ssl=1 2048w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?resize=850%2C189&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert-1.png?w=1920&amp;ssl=1 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Security Alert in Defender for Cloud - Click to enlarge<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d4d657 elementor-widget elementor-widget-image\" data-id=\"8d4d657\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert_info.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_scan_alert_info\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjcwOCwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX3NjYW5fYWxlcnRfaW5mby5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"605\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert_info.png?fit=640%2C605&amp;ssl=1\" class=\"attachment-medium_large size-medium_large wp-image-2708\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert_info.png?w=658&amp;ssl=1 658w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_alert_info.png?resize=300%2C284&amp;ssl=1 300w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Automatically deleted on upload<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-368b247 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"368b247\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cbc3a30\" data-id=\"cbc3a30\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-42b20d4 elementor-widget elementor-widget-heading\" data-id=\"42b20d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Scan results form Log analytics workspace<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-44a646d elementor-widget elementor-widget-text-editor\" data-id=\"44a646d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>I selected the &#8220;send scan results to Log Analytics&#8221; in storage plan settings\u00a0 and the results looks like this:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-564a13d elementor-widget elementor-widget-code-highlight\" data-id=\"564a13d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-javascript line-numbers\">\n\t\t\t\t<code readonly=\"true\" class=\"language-javascript\">\n\t\t\t\t\t<xmp>\/\/ Malicious blobs per storage account \n\/\/ Blobs with malicious scan results group by storage account name. \nStorageMalwareScanningResults\n| where ScanResultType == \"Malicious\"\n| summarize BlobUris = make_list(BlobUri), count() by StorageAccountName<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8928b4a elementor-widget elementor-widget-image\" data-id=\"8928b4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"188\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?fit=640%2C188&amp;ssl=1\" class=\"attachment-large size-large wp-image-2709\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?w=1095&amp;ssl=1 1095w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?resize=300%2C88&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?resize=1024%2C301&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?resize=768%2C226&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_scan_results_law.png?resize=850%2C250&amp;ssl=1 850w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-43c37bd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"43c37bd\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8b98a9f\" data-id=\"8b98a9f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-fbbc1e1 elementor-widget elementor-widget-heading\" data-id=\"fbbc1e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How does this show in DefenderXDR<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1df401 elementor-widget elementor-widget-text-editor\" data-id=\"d1df401\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Here&#8217;s how does malware scan and alerts show in DefenderXDR:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-404d3b9 elementor-widget elementor-widget-image\" data-id=\"404d3b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?ssl=1\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"defender_for_storage_malware_alert_defenderxdr\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MjcyMCwidXJsIjoiaHR0cHM6XC9cL3d3dy5qdXNzaW1ldHNvLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNVwvMDlcL2RlZmVuZGVyX2Zvcl9zdG9yYWdlX21hbHdhcmVfYWxlcnRfZGVmZW5kZXJ4ZHItMS1zY2FsZWQucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"76\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?fit=640%2C76&amp;ssl=1\" class=\"attachment-large size-large wp-image-2720\" alt=\"\" srcset=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?w=2560&amp;ssl=1 2560w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=300%2C36&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=1024%2C122&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=768%2C91&amp;ssl=1 768w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=1536%2C183&amp;ssl=1 1536w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=2048%2C244&amp;ssl=1 2048w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?resize=850%2C101&amp;ssl=1 850w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/defender_for_storage_malware_alert_defenderxdr-1-scaled.png?w=1920&amp;ssl=1 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Malware alerts in DefenderXDR. Click to enlarge<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-42b2097 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"42b2097\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2f6a299\" data-id=\"2f6a299\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-12ac5df elementor-widget elementor-widget-heading\" data-id=\"12ac5df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Understanding the malware scan results<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f9135e elementor-widget elementor-widget-text-editor\" data-id=\"7f9135e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"166\" data-end=\"286\">Tips to understand the results when Azure Storage blobs are scanned for malware:<\/p>\n<ul data-start=\"288\" data-end=\"594\">\n<li data-start=\"288\" data-end=\"461\">\n<p data-start=\"290\" data-end=\"461\">Where you can get scan results (blob index tags, Event Grid messages, logs in Log Analytics, security alerts in Defender for Cloud)<\/p>\n<\/li>\n<li data-start=\"462\" data-end=\"594\">\n<p data-start=\"464\" data-end=\"594\">What <em data-start=\"469\" data-end=\"478\">success<\/em> states and <em data-start=\"490\" data-end=\"497\">error<\/em> states of scans mean, with common error codes and causes<\/p>\n<\/li>\n<\/ul>\n<h3><strong>Success States<\/strong><\/h3>\n<ul data-start=\"648\" data-end=\"1020\">\n<li data-start=\"648\" data-end=\"758\">\n<p data-start=\"650\" data-end=\"758\"><strong data-start=\"650\" data-end=\"670\">No threats found<\/strong> \u2014 the blob was scanned and no malware detected.<\/p>\n<\/li>\n<li data-start=\"759\" data-end=\"873\">\n<p data-start=\"761\" data-end=\"873\"><strong data-start=\"761\" data-end=\"774\">Malicious<\/strong> \u2014 malware or malicious content was discovered in the blob.<\/p>\n<\/li>\n<li data-start=\"874\" data-end=\"1020\">\n<p data-start=\"876\" data-end=\"1020\"><strong data-start=\"876\" data-end=\"891\">Not scanned<\/strong> \u2014 the blob could not be scanned due to reasons like unsupported file type or encryption.<\/p>\n<\/li>\n<\/ul>\n<h3>Error States<\/h3>\n<p>There are the list of different <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/understand-malware-scan-results#error-states\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">error states.<\/span><\/a><\/p>\n<h3 data-start=\"2587\" data-end=\"2612\">Things to Keep in Mind<\/h3>\n<ul data-start=\"2614\" data-end=\"3016\">\n<li data-start=\"2614\" data-end=\"2761\">\n<p data-start=\"2616\" data-end=\"2761\">Not all blobs are scanned \u2014 large blobs, encrypted blobs, or those in unsupported tiers may be skipped.<\/p>\n<\/li>\n<li data-start=\"2762\" data-end=\"2902\">\n<p data-start=\"2764\" data-end=\"2902\">Permissions must be correct for scanning to succeed. If scanner can\u2019t read the blob, scan fails.<\/p>\n<\/li>\n<li data-start=\"2903\" data-end=\"3016\">\n<p data-start=\"2905\" data-end=\"3016\">Some errors are transient (temporary) and retrying later may succeed.<\/p>\n<\/li>\n<\/ul>\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/defender-for-cloud\/understand-malware-scan-results#success-states\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline;\">Read the whole article here.<\/span><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9bc3f3a elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"9bc3f3a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-17db4ef4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"17db4ef4\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7488d118\" data-id=\"7488d118\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-645299ef elementor-widget elementor-widget-author-box\" data-id=\"645299ef\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div  class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2024\/07\/jussi_06_2024.jpg?fit=262%2C300&#038;ssl=1\" alt=\"Picture of Jussi Metso\" loading=\"lazy\">\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div >\n\t\t\t\t\t\t<h6 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tJussi Metso\t\t\t\t\t\t<\/h6>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Author is a lifelong IT enthusiast, Microsoft Security MVP and interested in Cloud Security, XDR, SIEM and AI. Motto: Learning is the key for your future. <\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Defender for Storage now supports different ways to handle malicious files.  Now you can select the remediation option that fits your scenario. <\/p>\n<p>Built-in remediation capabilities<br \/>\nAutomated workflows to move or remove malicious files<br \/>\nAutomated workflows to move or ingest clean files to another destination<\/p>\n","protected":false},"author":1,"featured_media":2694,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[7],"tags":[36,44,45],"class_list":["post-2693","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cloudsecurity","tag-defenderforstorage","tag-malwarescan"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.jussimetso.com\/wp-content\/uploads\/2025\/09\/malware_deleted_in_shopping_cart-e1758130524660.png?fit=512%2C512&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/pes24X-Hr","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/posts\/2693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/comments?post=2693"}],"version-history":[{"count":20,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/posts\/2693\/revisions"}],"predecessor-version":[{"id":2731,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/posts\/2693\/revisions\/2731"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/media\/2694"}],"wp:attachment":[{"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/media?parent=2693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/categories?post=2693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jussimetso.com\/index.php\/wp-json\/wp\/v2\/tags?post=2693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}