Add documentation for Azure Defender in Blob Storage

[biggeeves]

When malicious files are uploaded via the REDCap application, the files will make it to Azure File Storage. By default the files are not scan and no remediation is done. This could be documented because it is not something out out of the box.

[SvenAelterman]

@biggeeves Thanks for contributing the issue. I think you're referring to Azure Blob storage and not file storage, right?

[biggeeves]

Yes, Blob storage. We do store redcap generated and user uploaded files in Blob storage.

…

On Sun, Nov 2, 2025 at 8:07 AM Sven Aelterman ***@***.***> wrote: *SvenAelterman* left a comment (microsoft/azure-redcap-paas#104) <#104 (comment)> @biggeeves <https://github.com/biggeeves> Thanks for contributing the issue. I think you're referring to Azure Blob storage and not file storage, right? — Reply to this email directly, view it on GitHub <#104 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA5ICNP6PHFSAVUERPTH3P332YM4HAVCNFSM6AAAAACIHIERW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTINZYGA3TENRXGY> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Greg Neils 917-656-6722

[SvenAelterman]

@biggeeves Thanks for the update. We're on the same page.

I will consider this with some other documentation updates that are pending. However, you should not expect that we'll provide documentation in this repo for enabling Defender for Storage, etc. Most likely, we'll outline this in documentation as a production consideration and provide links to Defender for Storage. I might document some possible approaches for using Defender for Storage effectively with REDCap, though that would require some review for people familiar with the tradeoffs of files being moved from where REDCap expects them.

[biggeeves]

Thanks Sven,

I'll be the first to implement these recommendations when they are ready.

[biggeeves]

Any update on this?