Merge pull request #263505 from ElazarK/WI194292-architecture-servers

WI194292 servers rearchitecture

Author: v-ccolin

articles/defender-for-cloud/TOC.yml

@@ -63,7 +63,7 @@
         - name: Protect your resources with Defender CSPM
           displayName: CSPM, cloud security posture management, enable
           href: tutorial-enable-cspm-plan.md
-        - name: Protect your servers with Defender for Servers
+        - name: Deploy Defender for Servers
           displayName: servers, server, enable
           href: tutorial-enable-servers-plan.md
         - name: Protect your applications with Defender for App Service
@@ -475,123 +475,129 @@
   - name: Defender for Servers
     displayName: hybrid, arc, Defender for Servers
     items:
-    - name: Plan Defender for Servers deployment
+    - name: Deploy
+      displayName: hybrid, arc, Defender for Servers
       items:
-        - name: Get started
-          displayName: VM, JIT, plan 1, plan 2, plans, vulnerability assessment, threat
-            management, defender for endpoint, vulnerability scanner,
-            Qualys, FIM, File integrity monitoring, adaptive application
-            controls, adaptive network hardening, docker, fileless attack
-            detection, auditd, simulate alerts
-          href: plan-defender-for-servers.md
-        - name: Review data residency and workspace design
-          href: plan-defender-for-servers-data-workspace.md
-        - name: Understand just-in-time VM access
-          displayName: jit, management
-          href: just-in-time-access-overview.md
-        - name: Understand File Integrity Monitoring
+      - name: Deploy Defender for Servers
+        href: tutorial-enable-servers-plan.md
+      - name: Plan Defender for Servers deployment
+        items:
+          - name: Get started
+            displayName: VM, JIT, plan 1, plan 2, plans, vulnerability assessment, threat management, defender for endpoint, vulnerability scanner, Qualys, FIM, File integrity monitoring, adaptive application controls, adaptive network hardening, docker, fileless attack detection, auditd, simulate alerts
+            href: plan-defender-for-servers.md
+          - name: Review data residency and workspace design
+            href: plan-defender-for-servers-data-workspace.md
+          - name: Determine roles and access
+            href: plan-defender-for-servers-roles.md
+          - name: Select a plan
+            href: plan-defender-for-servers-select-plan.md
+          - name: Review agents and extensions
+            href: plan-defender-for-servers-agents.md
+          - name: Scale a Defender for Servers deployment
+            href: plan-defender-for-servers-scale.md
+    - name: Agentless scanning
+      items:
+      - name: Agentless machine scanning
+        displayName: agentless, scanning, virtual, machines, freshness, snapshot, snapshots
+        href: concept-agentless-data-collection.md
+      - name: Manage secrets with agentless secret scanning
+        displayName: secrets, secret scanning, agentless
+        href: secret-scanning.md
+      - name: Protect servers with agentless malware scanning
+        displayName: agentless, scanning, virtual, machines, freshness, snapshot, snapshots, Microsoft Defender Antivirus
+        href: agentless-malware-scanning.md
+      - name: Enable agentless scanning for VMs
+        displayName: vulnerability, software inventory, agentless scanning
+        href: enable-agentless-scanning-vms.md
+    - name: Vulnerability scanning
+      items:
+      - name: Enable vulnerability scanning with Microsoft Defender Vulnerability Management
+        displayName: mde, tvm, vulnerability, va, arc, hybrid, defender vulnerability management
+        href: deploy-vulnerability-assessment-defender-vulnerability-management.md
+      - name: Enable vulnerability scanning with a Bring Your Own License (BYOL) solution
+        displayName: qualys, rapid7, vulnerability
+        href: deploy-vulnerability-assessment-byol-vm.md
+      - name: Automatically enable a vulnerability assessment solution
+        displayName: qualys, rapid7, vulnerability, auto provision
+        href: auto-deploy-vulnerability-assessment.md
+      - name: Transition to Microsoft Defender Vulnerability Management for servers
+        displayName: qualys, rapid7, vulnerability, migrate, transition, Microsoft Defender Vulnerability Management, mdvm
+        href: how-to-transition-to-built-in.md
+      - name: Common questions 
+        displayName: questions, common, MDVM, Qualys, BYOL, bring your own license, agent, consolidated, vulnerability, management, faq, frequently asked questions
+        href: faq-scanner-detection.yml
+      - name: Enable vulnerability scanning with the integrated Qualys scanner (deprecated)
+        displayName: qualys, va, vulnerability, arc, hybrid
+        href: deploy-vulnerability-assessment-vm.md
+    - name: File integrity monitoring
+      items:
+      - name: Understand File Integrity Monitoring
+        displayName: fim, change
+        href: file-integrity-monitoring-overview.md
+      - name: Enable File Integrity Monitoring (AMA)
+        displayName: fim, change, azure monitor agent
+        href: file-integrity-monitoring-enable-ama.md
+      - name: Enable File Integrity Monitoring (Log Analytics)
+        displayName: fim, change, log analytics, mma
+        href: file-integrity-monitoring-enable-log-analytics.md
+    - name: Just-in-time access
+      items:
+      - name: Understand just-in-time VM access
+        displayName: jit, management
+        href: just-in-time-access-overview.md
+      - name: Enable just-in-time access on VMs
+        displayName: jit, management, ports
+        href: just-in-time-access-usage.md
+    - name: Endpoint detection and response
+      items:
+      - name: Understand endpoint detection and response
+        displayName: mdatp, wdatp, mde, mdfe, defender for endpoint, endpoint, edr
+        href: integration-defender-for-endpoint.md
+      - name: Enable the Defender for Endpoint integration
+        displayName: ATP, mdatp, wdatp, mde, mdfe, defender for endpoint, endpoint, edr
+        href: enable-defender-for-endpoint.md
+    - name: Adaptive application controls
+      items:
+      - name: Understand adaptive application controls
+        displayName: aac, allowlist, reviewgroup
+        href: adaptive-application-controls.md
+      - name: Enable and manage adaptive application controls
+        displayName: aac, allowlist, reviewgroup
+        href: enable-adaptive-application-controls.md
+    - name: Review server protection
+      items:
+        - name: Review hardening recommendations
+          displayName: VM, guest configuration, vulnerabilities, ASB, benchmark
+          href: apply-security-baseline.md
+        - name: Review Docker host hardening recommendations
+          displayName: containers
+          href: harden-docker-hosts.md
+        - name: Review and remediate vulnerabilities
+          displayName: qualys, va, rapid7, vulnerability
+          href: remediate-vulnerability-findings-vm.md
+        - name: Disable specific vulnerability findings
+          displayName: qualys, rapid7, va
+          href: remediate-vulnerability-findings-vm.md#disable-specific-findings
+        - name: Compare baselines using file integrity monitoring
           displayName: fim, change
-          href: file-integrity-monitoring-overview.md
-        - name: Determine roles and access
-          href: plan-defender-for-servers-roles.md
-        - name: Select a plan
-          href: plan-defender-for-servers-select-plan.md
-        - name: Review agents and extensions
-          href: plan-defender-for-servers-agents.md
-        - name: Agentless scanning
-          items:
-          - name: Agentless machine scanning
-            displayName: agentless, scanning, virtual, machines, freshness, snapshot, snapshots
-            href: concept-agentless-data-collection.md
-          - name: Manage secrets with agentless secret scanning
-            displayName: secrets, secret scanning, agentless
-            href: secret-scanning.md
-          - name: Protect servers with agentless malware scanning
-            displayName: agentless, scanning, virtual, machines, freshness, snapshot, snapshots, Microsoft Defender Antivirus
-            href: agentless-malware-scanning.md
-        - name: Scale a Defender for Servers deployment
-          href: plan-defender-for-servers-scale.md
-        - name: Protect servers with Defender for Servers
-          href: tutorial-enable-servers-plan.md
-        - name: Configure vulnerability scanning
-          items:
-            - name: Enable agentless scanning for VMs
-              displayName: vulnerability, software inventory, agentless scanning
-              href: enable-agentless-scanning-vms.md
-            - name: Enable vulnerability scanning with Microsoft Defender Vulnerability
-                Management
-              displayName: mde, tvm, vulnerability, va, arc, hybrid, defender vulnerability
-                management
-              href: deploy-vulnerability-assessment-defender-vulnerability-management.md
-            - name: Enable vulnerability scanning with a Bring Your Own License (BYOL)
-                solution
-              displayName: qualys, rapid7, vulnerability
-              href: deploy-vulnerability-assessment-byol-vm.md
-            - name: Automatically enable a vulnerability assessment solution
-              displayName: qualys, rapid7, vulnerability, auto provision
-              href: auto-deploy-vulnerability-assessment.md
-            - name: Transition to Microsoft Defender Vulnerability Management for servers
-              displayName: qualys, rapid7, vulnerability, migrate, transition, Microsoft Defender Vulnerability Management, mdvm
-              href: how-to-transition-to-built-in.md
-            - name: Common questions 
-              displayName: questions, common, MDVM, Qualys, BYOL, bring your own license, agent, consolidated, vulnerability, management, faq, frequently asked questions
-              href: faq-scanner-detection.yml
-            - name: Enable vulnerability scanning with the integrated Qualys scanner (deprecated)
-              displayName: qualys, va, vulnerability, arc, hybrid
-              href: deploy-vulnerability-assessment-vm.md
-        - name: Enable just-in-time access on VMs
-          displayName: jit, management, ports
-          href: just-in-time-access-usage.md
-        - name: Protect your endpoints with Defender for Cloud's integration with
-            Microsoft Defender for Endpoint
-          displayName: ATP, mdatp, wdatp, mde, mdfe, defender for endpoint, endpoint, edr
-          href: integration-defender-for-endpoint.md
-        - name: Define lists of safe applications for machines
-          displayName: aac, allowlist, reviewgroup, adaptive application controls
-          href: adaptive-application-controls.md
+          href: file-integrity-monitoring-usage.md
+        - name: Improve your network security posture
+          displayName: anh, adaptive network hardening
+          href: adaptive-network-hardening.md
         - name: Review applications and software installed on your machines
           displayName: inventory, apps, software inventory, mde, tvm
           href: asset-inventory.md#access-a-software-inventory
-        - name: Configure file integrity monitoring
-          items:
-            - name: Enable File Integrity Monitoring (AMA)
-              displayName: fim, change, azure monitor agent
-              href: file-integrity-monitoring-enable-ama.md
-            - name: Enable File Integrity Monitoring (Log Analytics)
-              displayName: fim, change, log analytics, mma
-              href: file-integrity-monitoring-enable-log-analytics.md
-        - name: Review server protection
-          items:
-            - name: Review hardening recommendations
-              displayName: VM, guest configuration, vulnerabilities, ASB, benchmark
-              href: apply-security-baseline.md
-            - name: Review Docker host hardening recommendations
-              displayName: containers
-              href: harden-docker-hosts.md
-            - name: Review and remediate vulnerabilities
-              displayName: qualys, va, rapid7, vulnerability
-              href: remediate-vulnerability-findings-vm.md
-            - name: Disable specific vulnerability findings
-              displayName: qualys, rapid7, va
-              href: remediate-vulnerability-findings-vm.md#disable-specific-findings
-            - name: Compare baselines using file integrity monitoring
-              displayName: fim, change
-              href: file-integrity-monitoring-usage.md
-            - name: Improve your network security posture
-              displayName: anh, adaptive network hardening
-              href: adaptive-network-hardening.md
-        - name: Common questions (FAQ)
-          items:
-            - name: Common questions about Defender for Servers
-              displayName: common questions, faq, frequently asked questions
-              href: faq-defender-for-servers.yml
-            - name: Common questions about Azure Virtual Machines
-              displayName: common questions, faq, frequently asked questions
-              href: faq-vms.yml
-            - name: Common questions about vulnerability assessments
-              displayName: common questions, VA, vulnerability, assessment, faq, frequently
-                asked questions
-              href: faq-vulnerability-assessments.yml
+    - name: Common questions (FAQ)
+      items:
+        - name: Common questions about Defender for Servers
+          displayName: common questions, faq, frequently asked questions
+          href: faq-defender-for-servers.yml
+        - name: Common questions about Azure Virtual Machines
+          displayName: common questions, faq, frequently asked questions
+          href: faq-vms.yml
+        - name: Common questions about vulnerability assessments
+          displayName: common questions, VA, vulnerability, assessment, faq, frequently asked questions
+          href: faq-vulnerability-assessments.yml
   - name: Defender for Containers
     items:
       - name: Overview