Microsoft Defender for Cloud Apps connector for Microsoft Sentinel

By connecting with Microsoft Defender for Cloud Apps you will gain visibility into your cloud apps, get sophisticated analytics to identify and combat cyberthreats, and control how your data travels.

  • Identify shadow IT cloud apps on your network.
  • Control and limit access based on conditions and session context.
  • Use built-in or custom policies for data sharing and data loss prevention.
  • Identify high-risk use and get alerts for unusual user activities with Microsoft behavioral analytics and anomaly detection capabilities, including ransomware activity, impossible travel, suspicious email forwarding rules, and mass download of files.
  • Mass download of files

Deploy now >

Connector attributes

Connector attribute Description
Log Analytics table(s) SecurityAlert (MCAS)
McasShadowItReporting
Data collection rules support Not currently supported
Supported by Microsoft Corporation

Next steps

For more information, go to the related solution in the Azure Marketplace.