What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?

Vinod Survase 4,716 Reputation points
2023-05-10T08:02:58.4466667+00:00

What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?

Also need help on below query.

As I have implemented it in our tenant and it shows below on each apps for end users but how we can silently disable that pop up and keep monitoring the each app and actions.

User's image

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,217 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
175 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,352 questions
Accepted answer
  1. Marilee Turscak-MSFT 36,141 Reputation points Microsoft Employee
    2023-05-12T01:15:21.9266667+00:00

    Hi @Vinod Survase ,

    To address your first question, Microsoft Defender for Cloud Apps (previously known as Microsoft Cloud App Security) can monitor user activity across Exchange Online, SharePoint Online, OneDrive for Business, Teams, and more. For a full list of Office 365 activities monitored by Defender for Cloud Apps, see Search the audit log in the compliance center and Activity Filters. It can also detect and alert on suspicious behavior, such as data exfiltration, malware, and phishing attempts. Additionally, it provides advanced analytics and reporting capabilities to help you gain insights into your organization's security posture and identify areas for improvement. See Microsoft Defender for Cloud Apps - Overview

    As for your second question, if you don't want to notify users that they're being monitored, you can disable the notification message. To do this, follow these steps:

    1. Select the Settings icon (cog), and then select General settings.
    2. Under Conditional Access App Control, select User monitoring, and then clear the Notify users check box.

    The sessions will still be monitored by Microsoft Defender for Cloud Apps but the notification will go away. See: Troubleshoot - Access is monitored

    Other references:

    How to investigate anomaly detection alerts

    User activity policies

    Connect Office 365 to Microsoft Defender for Cloud Apps

    Let me know if this helps and if you have further questions.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest