Defender CSPM features: attack path analysis, cloud security explorer, agentless scanning, governance rules

A large environment can produce thousands of recommendations. Treating them all as equally urgent is impossible, so Defender CSPM adds context: which weaknesses actually connect into a path an attacker could use, and which resources matter most. All of this is built on the cloud security graph, a database of your resources, identities, network exposure, vulnerabilities, secrets and data sensitivity, plus the relationships among them.