118 questions with Microsoft Defender for Cloud Apps-related tags

Sort by: Updated
1 answer

Onboarding devices to Microsoft Defender for endpoint

Hi team, Could you please send me steps on how to manage security settings through Defender for endpoint. Also, we don't want to enroll devices to intune, we just want to manage them through Defender. Thank you for your help.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,301 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-09-13T21:57:36.5333333+00:00
J-3804 1,566 Reputation points
answered 2023-09-14T01:59:55.48+00:00
Crystal-MSFT 45,571 Reputation points Microsoft Vendor
1 answer

400 Bad request

Error running command synapse.createNotebook: HTTP Error Response: 400 Bad Request. This is likely caused by the extension that contributes synapse.createNotebook.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,204 questions
Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,471 questions
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
926 questions
Microsoft Configuration Manager
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-08-23T03:33:48.78+00:00
BI - Data Engineer 0 Reputation points
answered 2023-08-23T08:32:38.9033333+00:00
Iftikhar Ali 170 Reputation points
2 answers

What is included in MS Defender for business ?

What is included in MS Defender for Business ? I read the doc but not able to get it. I get that it contains Defender for Endpoint but boes it contain Defender for Office 365? Defender for Office 365 ? Identity ? or parts of it ?

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-08-14T14:43:05.2866667+00:00
Rishineken Pongen 166 Reputation points
commented 2023-08-14T19:36:02.01+00:00
Rishineken Pongen 166 Reputation points
1 answer One of the answers was accepted by the question author.

Onboarding devices on Microsoft 365 Defender remotely

Hello, I have a question regarding onboarding devices on Microsoft 365 Defender. I was wondering if I could onboard computers in my domain remotely by a local script using PowerShell or PsTools without logging in User's computer? Thank you for…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,038 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,314 questions
asked 2023-08-10T05:46:34.02+00:00
ehsanshirazi 80 Reputation points
accepted 2023-08-11T04:43:41.9666667+00:00
ehsanshirazi 80 Reputation points
0 answers

How Defender EASM found open port 500 on my IP address, and using Nmap scanner I didn't find that the port is open?

I'm using defender currently on a 30 day trial, I'm wondering how Defender EASM managed to find open port 500. I've used Nmap scanner with different switches and tried to scan port 500 directly but I got no result that the port is open. Now I don't know…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-15T08:11:25.85+00:00
FP 0 Reputation points
commented 2023-08-01T09:52:33.88+00:00
Givary-MSFT 30,176 Reputation points Microsoft Employee
1 answer

How to block Save As option in Microsoft 365

I can restrict document downloads in Microsoft 365 applications with Microsoft Defender for Cloud Apps. However, when I open a document with a client, the Save As option is enabled. How can I prevent this action?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,204 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-28T16:05:52.4566667+00:00
Samuel Peña 1 Reputation point
answered 2023-08-01T01:52:11.0333333+00:00
Byron Dittberner 0 Reputation points
1 answer One of the answers was accepted by the question author.

Mac OS accessing restricted application

Hey team, We have setup a policy to allow devices to access some applications and sites but we noticed that MAC OS users are now able to access restricted and unrestricted applications and sites. Can you please provide us with steps to prevent Mac users…

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,654 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,314 questions
asked 2023-07-27T23:03:02.6666667+00:00
J-3804 1,566 Reputation points
accepted 2023-07-28T14:27:39.03+00:00
J-3804 1,566 Reputation points
1 answer

Cannot turn feature on. This feature requires an Office 365 E5 license or the Threat Intelligence add-on for Office 365.

I already have M365 E5 license. Do we require 1 threat intelligence license for everyone in the company or how does it work?

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-06-12T13:15:09.8466667+00:00
Rishineken Pongen 166 Reputation points
answered 2023-07-27T10:20:19.8433333+00:00
Rob H 0 Reputation points
1 answer One of the answers was accepted by the question author.

Can the defender for identity sensor be installed on normal vms being used for DBs and Apps? because we fully cloud based and have no on prem domain controllers

Improvement Action: Start your Defender for Identity deployment, installing Sensors on Domain Controllers and other eligible servers. We need to establish if we can utilize this service on normal VMs and if there is any benefit of it?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-24T08:06:28.89+00:00
Rizwan Assad 321 Reputation points
accepted 2023-07-26T12:06:23.26+00:00
Rizwan Assad 321 Reputation points
1 answer

Prevent access to personal accounts from Office 365

Hello, I have been given the task of researching and implementing restrictions within our organization, specifically regarding user access to personal accounts and services from within the Office 365 app suite. For example, by default, there appears to…

Microsoft Exchange Online
Office
Office
A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.
1,432 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,024 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-17T14:39:53.0733333+00:00
Matt Pollock 246 Reputation points
answered 2023-07-25T19:53:35.38+00:00
Matt Pollock 246 Reputation points
1 answer One of the answers was accepted by the question author.

I want to know the policy of Microsoft Defender for Cloud App

I want to know if the policy of Microsoft Defender for Cloud App 'Ransomware activity,' includes the condition of detecting the file named 'HELP_DECRYPT.URL' as a normal file but still triggers an alert.

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,038 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-23T18:11:03.58+00:00
Koonnamchok Klongkaew 140 Reputation points
accepted 2023-07-25T09:39:58.4566667+00:00
Koonnamchok Klongkaew 140 Reputation points
2 answers One of the answers was accepted by the question author.

Teams account sign in error

Teams sign in error We can't sign in this account (yymyint@xxx.com) in Mobile version. It shows like this image error. Pls tell me how to solve that error. Kindly reply to me. Thanks.

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,471 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,226 questions
Microsoft Teams Development
Microsoft Teams Development
Microsoft Teams: A Microsoft customizable chat-based workspace.Development: The process of researching, productizing, and refining new or existing technologies.
2,999 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-06T06:17:38.0766667+00:00
IT Support 266 Reputation points
accepted 2023-07-17T04:15:11.66+00:00
IT Support 266 Reputation points
1 answer One of the answers was accepted by the question author.

Onboarding multiple devices by local script

Hello Microsoft, I have a question regarding onboarding devices on Microsoft 365 Defender. I was wondering if I could onboard multiple devices in a domain by a local script (more than 10 devices) !? Thank you for responding*

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,654 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,038 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-11T02:30:12.8066667+00:00
ehsanshirazi 80 Reputation points
accepted 2023-07-15T00:03:51.3233333+00:00
ehsanshirazi 80 Reputation points
2 answers

How do I export a list of Analytics from the Defender Products

As a MSSP for Microsoft Sentinel we have the Defender MDO Data connectors enabled and we're creating Incidents based on the Alerts that are created from each of the different MDO's Defender for Identity Defender for Office 365 Defender for Endpoint …

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,038 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-10T17:55:53.18+00:00
Kentucky Mike 51 Reputation points
commented 2023-07-11T17:45:01.57+00:00
Kentucky Mike 51 Reputation points
2 answers

How to prevent users to grant consent on third party apps which are using OAuth which is token based authentication and authorization?

How to prevent users to grant consent on third party apps which are using OAuth which is token based authentication and authorization? As we have seen many users are using their work account to grant on different apps to use those and seems those apps…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,314 questions
asked 2023-07-02T05:45:41.4266667+00:00
Vinod Survase 4,716 Reputation points
commented 2023-07-10T19:47:30.83+00:00
JamesTran-MSFT 36,531 Reputation points Microsoft Employee
0 answers

Prevent a user from trigerring the same cloud app policy multiple times

Hello, I have a policy that triggers when a user fails to connect 100 times in 60 minutes. The main use of this policy is to notify our security team when a user is likely to be under attack so that they can contact the user to establish a strong…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,204 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-07-04T07:03:56.26+00:00
Jean Valjean 999 0 Reputation points
commented 2023-07-04T18:26:05.77+00:00
B santhiswaroop naik 385 Reputation points
2 answers

defender & intune-restrict access to a website based on device risk level

Hi all, is it possible to restrict access to a public website based on a risk level calculated by defender? Lets say that if a device has HIGH risk level, it will not be allowed to access particular web site.... PS: We use M365 E3 with M365 E5 Security…

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
370 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-06-13T22:01:41.91+00:00
michal 191 Reputation points
edited the question 2023-06-19T19:16:02.87+00:00
JamesTran-MSFT 36,531 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

MDE_365 _Integration with SIEM(ArcSight)

Hi All, In my environment ,we have integrated Microsoft 365 defender (mde) -EDR with ArcSight ,in our case we receive only Alerts and Incidents events only in our ArcSight logs .which is creating more noise and we are not able to create any rule in…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,204 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
926 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
asked 2023-06-12T13:42:50.4533333+00:00
Akshyalakshmi Anandan Murali 20 Reputation points
accepted 2023-06-15T10:38:13.76+00:00
Akshyalakshmi Anandan Murali 20 Reputation points
2 answers One of the answers was accepted by the question author.

Azure License Allocation

Hi everyone, I am just getting started in azure which has lead me to a very junior license question. I have noticed we have a few licenses in our managed azure tenant which are not assigned. Licenses include: Microsoft Defender for Cloud Apps Microsoft…

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,314 questions
asked 2023-06-05T05:53:34.0033333+00:00
Callum C 20 Reputation points
accepted 2023-06-05T23:09:28.7333333+00:00
Callum C 20 Reputation points
1 answer One of the answers was accepted by the question author.

What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?

What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps? Also need help on below query. As I have implemented it in our tenant and it shows below on each apps for end users but how we can silently disable that…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,204 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
174 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,314 questions
asked 2023-05-10T08:02:58.4466667+00:00
Vinod Survase 4,716 Reputation points
commented 2023-06-02T22:26:40.73+00:00
Marilee Turscak-MSFT 35,901 Reputation points Microsoft Employee