Protecting VMs from viruses and malware
VMs, VM Scale Sets (VMSSes), and Windows Virtual Desktops (WVDs) in Azure, just like any other computer system, can be vulnerable to malicious software attacks. The recommendation is to install antimalware protection on all user-managed systems in Azure to protect against compromise due to viruses, worms, spyware, and other malicious software.
We can either use a Microsoft-provided endpoint protection solution such as the free Microsoft Antimalware for Azure, or an endpoint protection solution from third-party security vendors such as Palo Alto, Symantec, Trend Micro, and more.
Microsoft Antimalware for Azure is a free endpoint protection solution that can be used in the absence of an alternative. It has very limited capabilities compared to paid alternatives such as Microsoft Defender for Endpoint or third-party security offerings. Its capabilities are very much limited to signature-based runtime protection against malware for Windows...