Azure Security Center helps helps ESHA prevent, detect, and respond to threats with increased visibility into (and control over) the security of our customers Azure resources. It provides integrated security monitoring and policy management across our subscriptions. It helps detect threats that might otherwise go unnoticed, and it works with a broad ecosystem of security solutions.
Azure Monitor
Azure Monitor is basic tool for monitoring services running on Azure. It gives ESHA infrastructure-level data about the throughput of a service and the surrounding environment.
Azure Monitor includes the following components.
Azure Activity Log
The Azure Activity Log provides insight into the operations that were performed on resources in our subscription.
Azure diagnostic logs
Azure diagnostic logs are emitted by a resource and provide rich, frequent data about the operation of that resource. The content of these logs varies by resource type.
...
Diagnostic logs differ from the Activity Log. The Activity log provides insight into the operations that were performed on resources in our subscription. Diagnostic logs provide insight into operations that our resource performed itself.
...
Azure Monitor provides telemetry that gives ESHA visibility into the performance and health of our workloads on Azure. The most important type of Azure telemetry data is the metrics (also called performance counters) emitted by most Azure resources. Azure Monitor provides several ways to configure and consume these metrics for monitoring and troubleshooting.
...