I have been on the cloud vendor side forced into using these crappy Microsoft protection tools because of the daft Azure compliance framework. Customers would ask for your score on this and your score was impacted by how many of these very expensive services you had enabled. THEY DID NOT WORK! We had an independent security testing org prove that uploaded malware was half flagged by defender for storage but then no subsequent downstream events were triggered. Microsoft simply said “known issue and will be fixed at some point”. Un-fucking-believable. Azure compliance framework is 100% an Azure services upsell versus a genuine security focus initiative.