Cloud Renames Contribute
RenamedCompute, Security & InfraAzure

RiskIQ Digital Footprint Microsoft Defender External Attack Surface Management

External attack surface management service that continuously discovers, maps, and monitors internet-exposed domains, IP blocks, hosts, and SSL certificates across multi-cloud and hybrid environments.

Open in interactive timeline ↗All Azure renamesHome

Naming timeline

  1. RiskIQ Digital Footprint

    · Microsoft Acquisition of RiskIQ

    Microsoft completed the acquisition of RiskIQ, bringing external attack surface discovery (Digital Footprint) and internet threat intelligence (PassiveTotal) into Microsoft Security.

  2. Microsoft Defender External Attack Surface ManagementCurrent name

    · General Availability as Azure-Native Service

    RiskIQ Digital Footprint launched as Microsoft Defender External Attack Surface Management (Defender EASM) on Azure (Microsoft.Easm/workspaces), alongside Microsoft Defender Threat Intelligence from RiskIQ PassiveTotal.

What is RiskIQ Digital Footprint called now?

RiskIQ Digital Footprint is now called Microsoft Defender External Attack Surface Management, with the latest change on 2 August 2022 (General Availability as Azure-Native Service). External attack surface management service that continuously discovers, maps, and monitors internet-exposed domains, IP blocks, hosts, and SSL certificates across multi-cloud and hybrid environments. Only the customer-facing name changed; the underlying technical identifiers remain backward compatible.

Also known as

  • Microsoft Defender EASM

Technical identifiers

Technical identifiers unchanged. Only the customer-facing product name changed; the APIs, CLI commands, IAM roles and Terraform resources below keep their legacy identifiers for backward compatibility.

ARM Resource Providers (Microsoft.*)Microsoft.Easm/workspaces *.easm.defender.microsoft.com (Data-plane REST API)
Azure CLI (az) / PowerShellaz rest (Microsoft.Easm/workspaces)
Entra ID / Azure RBAC RolesOwner Contributor Reader
Terraform Resources (azurerm_*)azapi_resource (Microsoft.Easm/workspaces)

Defender EASM resources use the Azure-native Microsoft.Easm/workspaces ARM Resource Provider and *.easm.defender.microsoft.com data-plane REST APIs.

Notes & disambiguation

  • Following Microsoft's acquisition of attack surface and threat intelligence vendor RiskIQ in August 2021, Microsoft rebranded and launched RiskIQ Digital Footprint as an Azure-native service, Microsoft Defender External Attack Surface Management (Defender EASM), in August 2022.
  • At the same time in August 2022, RiskIQ's companion threat research platform, RiskIQ PassiveTotal, was rebranded into Microsoft Defender Threat Intelligence (Defender TI), with its threat intelligence feeds integrated into Microsoft Defender XDR and Microsoft Sentinel.
  • Defender EASM workspaces are provisioned in Azure via the Microsoft.Easm/workspaces ARM Resource Provider and managed through the Azure portal, REST data-plane APIs, and AzAPI / ARM templates.

Sources & official documentation

Catalog last updated . Spotted an error? Suggest an edit