Explanation:
Microsoft Defender External Attack Surface Management (Defender EASM): Provides an inventory of all external-facing assets and determine which are accessible from the internet, including virtual machines. It minimizes administrative effort by automating discovery and categorization of resources.
Discovery group in Defender EASM: Enables identification and monitoring of external-facing assets based on the subscription and resource configuration, such as virtual machines.
https://learn.microsoft.com/en-us/azure/external-attack-surface-management/overview
https://learn.microsoft.com/en-us/azure/external-attack-surface-management/discovering-your- attack-surface