5.2.4. Defender External Attack Surface Management (EASM)

💡 First Principle: EASM discovers and monitors your organization's external attack surface—internet-facing assets that attackers can see and target.

Scenario: You need to discover assets in your online infrastructure and actively scan for vulnerabilities.

EASM Capabilities

• Asset discovery: Crawls and discovers internet-facing assets
• Vulnerability scanning: Actively scans discovered assets
• Connection monitoring: Discovers new connections over time
• Attack surface insights: Prioritizes risks