---
title: Microsoft Defender for Containers should be enabled with all of its components
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Microsoft Defender for Containers
  should be enabled with all of its components
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Microsoft Defender for Containers should be enabled with all of its components
 
## Description{% #description %}

Microsoft Defender for Containers protects Kubernetes clusters, container registries, and container workloads only through the components that are turned on. This rule passes when the plan uses the Standard tier and all of its components are enabled. The components are the Defender sensor, Kubernetes API access, agentless scanning for machines, and registry access.

## Remediation{% #remediation %}

Enable the Defender for Containers plan and each of its components on the subscription. See [Enable Defender for Containers in Microsoft Defender for Cloud](https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-plan).

## References{% #references %}

- [Enable Defender for Containers in Microsoft Defender for Cloud](https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-plan)
- [CIS Microsoft Azure Foundations Benchmark](https://www.cisecurity.org/benchmark/azure)