Scheduled scanning - Scans periodically to detect malware, including actively running programs.

Real-time protection - monitors activity in Cloud Services and on Virtual Machines to detect and block malware execution.

When you deploy and enable Microsoft Antimalware for Azure for your applications, the following core features are available:

Protection may be deployed based on the needs of application workloads, with either basic secure-by-default or advanced custom configuration, including antimalware monitoring. Microsoft Antimalware for Azure is a single-agent solution for applications and tenant environments, designed to run in the background without human intervention. The solution is built on the same antimalware platform as Microsoft Security Essentials (MSE), Microsoft Forefront Endpoint Protection, Microsoft System Center Endpoint Protection, Microsoft Intune, and Microsoft Defender for Cloud. It generates alerts when known malicious or unwanted software tries to install itself or run on your Azure systems.

Microsoft Antimalware for Azure is a free real-time protection that helps identify and remove viruses, spyware, and other malicious software.

Microsoft antimalware service