Get started with Agentless Vulnerability & Threat Detection in Microsoft Azure

To start scanning for vulnerabilities and malware in your cloud resources, connect your Azure subscription to Trend Vision One in Cloud Accounts using the Terraform template. Enable Agentless Vulnerability & Threat Detection in Features and Permissions.

Agentless Vulnerability & Threat Detection scans the following Azure resource types:

• Managed disks that support use as an OS disk and are attached to VMs
• Container Registry container images

Agentless Vulnerability & Threat Detection works in Azure as a resource group within your subscription that takes snapshots of disks and collects container images. The collected resources are then scanned for vulnerabilities or malware. Disk scan results are stored in Azure Blob Storage while container images are stored in Azure Files. Results are forwarded to Trend Vision One for analysis.

Scan results can be seen in the Trend Vision One console in Cloud Posture, Executive Dashboard, Operations Dashboard, and asset profile screens in Attack Surface Discovery. After you patch vulnerabilities or remediate malware in disks, the detections no longer appear after the next daily scan. Vulnerability detections in container images remain visible in Operations Dashboard → Vulnerabilities for seven days after mitigation. Malware detections in container images remain visible in Operations Dashboard → All Risk Events for seven days after remediation.

The following table lists scanning limitations that apply to each supported Azure resource type.

Agentless Vulnerability & Threat Detection only supports the following operating system instances for vulnerability scanning in Azure subscriptions.

The following table lists the Azure regions supported for Agentless Vulnerability & Threat Detection deployment.