MDC CSPM Does Not Include *All MDEASM Capabilities

[jmetzmicrosoftgbb]

Hello, I just wanted to call out something that could be confusing. In the chart showing Defender for Cloud CSPM/Foundational CSPM capabilities, EASM is included for Defender CSPM. IMO, it should be clarified that the full MDEASM solution is not included with Defender CSPM but rather the detection of internet accessible assets via MDC recommendation/attack paths.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 2adc522b-6260-65dd-dff6-8e08bf951541
• Version Independent ID: 63ea0808-37c4-f7cf-8721-3518ab8eb0f7
• Content: Cloud Security Posture Management (CSPM) - Microsoft Defender for Cloud
• Content Source: articles/defender-for-cloud/concept-cloud-security-posture-management.md
• Service: defender-for-cloud
• GitHub Login: @dcurwin
• Microsoft Alias: dacurwin

[TPavanBalaji]

@jmetzmicrosoftgbb Thanks for your feedback! We will investigate and update as appropriate.

[ManoharLakkoju-MSFT]

@jmetzmicrosoftgbb Thank you for bringing this to my attention. You are correct that the chart in the article may be misleading. While Defender CSPM does include some external attack surface management capabilities, it does not include the full Microsoft Defender for External Attack Surface Management (MDEASM) solution. Instead, it provides detection of internet accessible assets via MDC recommendation/attack paths. I will make sure to pass this feedback along to the appropriate team to see if we can clarify this in the article. Let me know if you have any other questions or concerns.

[ManoharLakkoju-MSFT]

@dcurwin Can you please check and add your comments on this doc update request as applicable.

[dcurwin]

Thank you for your comment. The document has been updated and the changes should be live in the next few hours.

please-close