The Microsoft Security Response Centre (MSRC) performs select security monitoring of the Azure network and infrastructure and receives threat intelligence and abuse complaints from third parties.
When MSRC becomes aware that your data has been accessed by an unlawful or unauthorised party or that an employee’s use of Azure does not comply with the terms for Acceptable Use, a security incident manager notifies you.
Notification is typically received by email to the security contacts specified in Microsoft Defender or the Azure subscription owner if a security contact is not specified.
Defender is an Azure service that continuously monitors your Azure environment and applies analytics to detect a wide range of potentially malicious activity. These detections are communicated as security alerts in the workload protection dashboard.