You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/common/storage-advanced-threat-protection.md
+7-8Lines changed: 7 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: storage
5
5
author: rmatchoro
6
6
ms.service: storage
7
7
ms.topic: article
8
-
ms.date: 03/07/2019
8
+
ms.date: 03/11/2019
9
9
ms.author: monhaber
10
10
ms.manager: shaik
11
11
---
@@ -17,7 +17,7 @@ Advanced Threat Protection for Azure Storage provides an additional layer of sec
17
17
Security alerts are triggered when anomalies in activity occur. These security alerts are integrated with [Azure Security Center](https://azure.microsoft.com/services/security-center/), and are also sent via email to subscription administrators, with details of suspicious activity and recommendations on how to investigate and remediate threats.
18
18
19
19
> [!NOTE]
20
-
> Advanced Threat Protection for Azure Storage is currently available only for the Blob storage. Details about the new pricing is available in the [Azure Security Center](https://docs.microsoft.com/en-us/azure/security-center/security-center-pricing) pricing page, including an option for a trial period for the first 30 days without charge.
20
+
> Advanced Threat Protection for Azure Storage is currently available only for the Blob storage. Details about the new pricing is available in the [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-pricing) pricing page, including an option for a trial period for the first 30 days without charge.
21
21
22
22
Advanced Threat Protection for Azure Storage ingests diagnostic logs of read, write, and delete requests to Blob storage for threat detection. To investigate the alerts from Advanced Threat Protection, you can view related storage activity using Storage Analytics Logging. For more information, see how to [configure Storage Analytics logging](storage-monitor-storage-account.md#configure-logging).
23
23
@@ -36,22 +36,21 @@ Advanced Threat Protection for Azure Storage ingests diagnostic logs of read, wr
36
36

37
37
38
38
### Using Azure Security Center
39
-
When you subscribe to the Standard tier in Azure Security Center, Advanced Threat Protection is set up on your storage accounts. For more information see [Upgrade to Security Center's Standard tier for enhanced security](https://docs.microsoft.com/en-us/azure/security-center/security-center-pricing).
40
-
<!-- can I say ATP is automatically set up-->
39
+
When you subscribe to the Standard tier in Azure Security Center, Advanced Threat Protection is set up on your storage accounts. For more information see [Upgrade to Security Center's Standard tier for enhanced security](https://docs.microsoft.com/azure/security-center/security-center-pricing). (Prices in the image are for example purposes only.)
41
40
42
41

43
42
44
43
### Using Azure Resource Manager templates
45
44
46
45
Use an Azure Resource Manager template to deploy an Azure Storage account with Advanced Threat Protection enabled.
47
46
For more information, see
48
-
[Storage account with Advanced Threat Protection](https://azure.microsoft.com/en-us/resources/templates/201-storage-advanced-threat-protection-create/).
47
+
[Storage account with Advanced Threat Protection](https://azure.microsoft.com/resources/templates/201-storage-advanced-threat-protection-create/).
49
48
50
49
### Using REST API
51
50
Use Rest API commands to create, update, or get the Advanced Threat Protection setting for a specific storage account.
@@ -87,7 +86,7 @@ Alerts are generated by unusual and potentially harmful attempts to access or ex
87
86
88
87
### Anomalous access pattern alerts
89
88
90
-
***Geo-anomaly**: This alert is triggered when there's a change in the access pattern to a storage account. For instance, when someone has accessed a storage account from an unusual geographical location.
89
+
***Access from unusual location**: This alert is triggered when there's a change in the access pattern to a storage account. For instance, when someone has accessed a storage account from an unusual geographical location.
91
90
Potential causes:
92
91
* An attacker has accessed your storage account
93
92
* A legitimate user has accessed your storage account from a new location
0 commit comments