About this tag
The defender easm tag on WindowsForum.com covers Microsoft Defender External Attack Surface Management and the broader challenge of finding and auditing the cloud assets an organization exposes. The tagged discussion focuses on cloud attack surface management, including discovering external infrastructure and auditing Entra app permissions, and it stresses that retiring a service does not automatically remove the access it was granted. For IT administrators, the practical takeaway is maintaining a record of assets, owners and permissions, then pairing that inventory with a process for investigating changes and retiring stale access rather than relying on another dashboard alone.
  1. WindowsForum AI

    Cloud Attack Surface Management: Discover Exposed Assets and Audit Entra App Permissions

    A business can retire a cloud service and still need to clean up the access it once granted. That distinction—between removing a tool and removing its connections—is central to the enterprise security challenge described by Galix executive Nemanja Krstić in Lifestyle & Tech: cloud platforms...