services / Azure / Security assessments

The results of Microsoft Defender for Cloud security assessments (recommendation findings and their healthy/unhealthy status) recorded against resources at the scope.

Assessment state is the security posture record; falsifying it misleads responders and auditors but does not alter production data.

Microsoft.​Security/​assessments/​write

Writing assessment results lets an attacker fabricate a healthy/passing status for a resource, hiding a real finding of their misconfiguration from responders and dashboards.

Risks

1. Data manipulation (HIGH)
2. Defense destruction (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links