Defender Security Dashboard

Defender Security Dashboard

How to set up a Jira dashboard with saved filters and Rich Filters for a real-time view of Defender for Cloud findings across the eshars Azure environment.

Prerequisites

• Jira project admin access to the DEVOPS project
• (Optional) Jira site admin access to install Marketplace apps

Step 1: Create Saved JQL Filters

Navigate to Filters > Create filter (or click the search bar and enter JQL). After each query returns results, click Save as to save the filter.

Filters to Create

Filter Name	JQL	Purpose
Defender - All Open	project = DEVOPS AND labels = Defender AND status != Done ORDER BY priority DESC	Master view of all unresolved findings
Defender - Wave 1 (High+Prod)	project = DEVOPS AND labels = Defender AND labels = defender-high AND labels = env-prod AND status != Done ORDER BY created ASC	Highest-priority items (immediate action)
Defender - Wave 2	project = DEVOPS AND labels = Defender AND ((labels = defender-high AND labels = env-nonprod AND NOT labels = env-prod) OR (labels = defender-medium AND labels = env-prod)) AND status != Done ORDER BY priority DESC	Second-priority items (next sprint)
Defender - Overdue (30d+)	project = DEVOPS AND labels = Defender AND status != Done AND created <= -30d ORDER BY created ASC	Items open longer than 30 days
Defender - Recently Resolved	project = DEVOPS AND labels = Defender AND status = Done AND resolved >= -14d ORDER BY resolved DESC	Recently closed items (verify in Defender portal)
Defender - Attack Path	project = DEVOPS AND labels = Defender AND labels = attack-path AND status != Done ORDER BY priority DESC	Items with associated attack path alerts

Sharing Filters

After saving each filter:

1. Click the filter name to open it
2. Click Details (or the ⋯ menu > Edit permissions)
3. Under Add shares, share with your team or project
4. Click Save

---

Step 2: Install Rich Filters for Jira (Optional)

Rich Filters adds interactive filtering, color-coded rows, and summary cards to Jira dashboards. The free tier supports 1 dashboard.

This step is optional

You can build a functional dashboard using only built-in Jira gadgets. Rich Filters enhances the experience with color coding and interactive drill-down.

Installation

1. Navigate to Jira Settings (gear icon) > Apps > Find new apps
2. Search for “Rich Filters for Jira Dashboards” (by Refined)
3. Click Get app > Get it free
4. Approve the requested permissions
5. Wait for installation to complete (~30 seconds)

---

Step 3: Create the Dashboard

1. Navigate to Dashboards > Create dashboard
2. Name: Defender Security Posture
3. Description: Real-time view of Microsoft Defender for Cloud findings across eshars Azure environment
4. Sharing: Share with your team
5. Click Save

Dashboard Layout

Row 1: Summary

Add these gadgets side by side for a high-level overview:

Gadget 1 — Pie Chart (Severity Breakdown)

Setting	Value
Gadget type	Pie Chart
Saved filter	Defender - All Open
Statistic type	Labels
Sort by	Total

This shows the proportion of defender-high / defender-medium / defender-low labels.

Gadget 2 — Two-Dimensional Filter Statistics

Setting	Value
Gadget type	Two Dimensional Filter Statistics
Saved filter	Defender - All Open
X-axis	Labels (filter to severity labels only)
Y-axis	Status

Shows a matrix of severity vs status (To Do / In Progress / Done).

Gadget 3 — Filter Results Count

Setting	Value
Gadget type	Filter Results
Saved filter	Defender - Wave 1 (High+Prod)
Number of results	1
Columns	Key, Summary

Quick count of remaining Wave 1 items. The header shows the total.

Row 2: Detail Table

Gadget 4 — Filter Results (or Rich Filter)

With Rich Filters

Setting	Value
Gadget type	Rich Filter
Saved filter	Defender - All Open
Columns	Key, Summary, Priority, Status, Labels, Assignee, Created
Row colors	Red: label contains defender-high, Yellow: label contains defender-medium, Blue: label contains defender-low
Interactive filters	Labels, Status, Assignee

Without Rich Filters

Setting	Value
Gadget type	Filter Results
Saved filter	Defender - All Open
Columns	Key, Summary, Priority, Status, Labels, Assignee, Created
Number of results	25

Gadget 5 — Overdue Items

Setting	Value
Gadget type	Filter Results
Saved filter	Defender - Overdue (30d+)
Columns	Key, Summary, Created, Priority, Assignee
Number of results	10

Row 3: Progress Tracking

Gadget 6 — Created vs Resolved Chart

Setting	Value
Gadget type	Created vs Resolved Chart
Saved filter	Defender - All Open (use the “All” filter, not just open)
Period	Monthly
Days previously	180 (6 months)

Shows the trend of new findings vs closures over time.

Gadget 7 — Recently Resolved

Setting	Value
Gadget type	Filter Results
Saved filter	Defender - Recently Resolved
Columns	Key, Summary, Resolved, Assignee
Number of results	10

---

Rich Filters Color Coding (if installed)

Configure these row highlight rules in the Rich Filter gadget settings:

Condition	Background Color	Text
Label contains defender-high	#FFEBEE (light red)	Dark text
Label contains defender-medium	#FFF8E1 (light yellow)	Dark text
Label contains defender-low	#E3F2FD (light blue)	Dark text
Status = Done	#E8F5E9 (light green)	Dark text
Label contains overdue	#FFCDD2 (red)	Bold text

---

Maintenance

• Weekly: Glance at the dashboard during the weekly review to check trends
• Monthly: After the monthly Defender intake, verify new items appear in the filters
• As needed: If the label taxonomy or Epic keys change, update saved filter JQL
• Rich Filters free tier: Limited to 1 dashboard — if you need more, evaluate the paid tier