150 questions with Microsoft Defender for Cloud Apps-related tags

Sort by: Updated
Updated Created Answers
1 answer

How to export piechart from MS Defender XDR Advanced Hunting?

Hello everyone, I am trying to export query result as a piechart, but there is no such an option. Do I miss something or is impossible? Thanks! Aleksandar

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,150 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,164 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
211 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
48 questions
asked 2024-11-12T09:51:02.8+00:00
Aleksandar Tomov 30 Reputation points
answered 2024-11-13T00:25:38.94+00:00
James Hamil 25,636 Reputation points Microsoft Employee
0 answers

How to remove personal device monitoring from Microsoft Defender

Hi Everyone, I need some help with removing personal device from monitoring in Microsoft Defender. I have created a tag, but unsure on applying it. There are few corporate devices which is not onboarded but bought and are in apple business manager which…

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
211 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-24T00:28:32.1966667+00:00
Divya Kushal 5 Reputation points
commented 2024-11-08T11:21:51.3966667+00:00
Prathista Ilango 95 Reputation points Microsoft Employee
0 answers

How to add more than 3 email addresses to Defender Dark Web Monitoring

Hello! The Defender App dark web monitoring service in the iOS and desktop apps will not let me add more than 3 email addresses for monitoring. I am able to add 3 email addresses without issue and at one point, I was able to add 5 email addresses and…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-09-23T08:13:30.8866667+00:00
Kyle 0 Reputation points
commented 2024-11-07T11:40:46.2766667+00:00
Prathista Ilango 95 Reputation points Microsoft Employee
0 answers

Attack Simulation Training - Training Issue

Hi there, Re: Attack Simulation Training in Microsoft Defender We have deployed phishing campaigns and some users have been compromised. Some of these users are reporting that they have completed the training modules they've been assigned in this…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,418 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
211 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-02T12:41:09.7066667+00:00
PARR Shaun 35 Reputation points
commented 2024-11-06T20:16:58.5033333+00:00
Sheila 21 Reputation points
1 answer

Defender for Cloud Apps - Legacy filters

Hi, I found the "legacy" indication in these file filter's on a policy (Stale externally shared files), in Defender for Cloud Apps. I can't find any documentation about this. I want to now if the filters will stop being supported. Also…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-31T12:19:51.2566667+00:00
Luís Costa 226 Reputation points
answered 2024-11-06T07:53:55.6533333+00:00
Pauline Mbabu 560 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

How much time to reflect the results in Defender for Cloud recommendations - Azure Portal?

How much time takes for "Defender for Cloud (CSPM)" to reflect the results in Security Section of the Azure Subscription after fixing the Security Recommendations. Do we have any documentation on this?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,418 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-11-05T16:53:03.6633333+00:00
Rajoli Hari Krishna 576 Reputation points
accepted 2024-11-06T04:15:20.59+00:00
Rajoli Hari Krishna 576 Reputation points
1 answer

Do messages get emailed automatically if daily message limit for outbound emails exceeds a certain number?

We are currently to trying to adjust the daily message limit for outbound spam policy within Defender. Our current policy is set to the options pictured attached. Our concern is communication, especially emergency communication, to members and providers.…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-10T13:05:58.44+00:00
Marcos Correa 5 Reputation points
answered 2024-11-05T08:15:45.69+00:00
Pauline Mbabu 560 Reputation points Microsoft Employee
0 answers

Issue with Microsoft Cloud App Security API - Unexpected HTML Response (500 Error)

Hi, I'm working on a Power BI solution for a client to monitor Shadow IT on managed devices and I wanted to query the Microsoft Cloud App Security API. I am using an application which returns an OAuth2 token (to follow good practices) with the following…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,150 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-30T14:01:07.77+00:00
Arthur Bartoli 0 Reputation points
1 answer

Routing Kantata (salesforce application) through MCAS performance problem

I'm not sure which community to post this in, so apologies if this isn't the correct one. We want to route Kantata - a Salesforce application - through MCAS but when we do, there is a significant performance degradation. It is so bad our main users of…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-09-20T07:39:57.0733333+00:00
James Sidwell 45 Reputation points
commented 2024-10-24T13:44:12.14+00:00
James Sidwell 45 Reputation points
1 answer

on-premises log has not been appeared in Cloud Discovery log(MCAS)

In my environment, sending on-premise devices logs to Cloud Discovery with AMA agent built on Linux Server. After 09/16 18:05(JST), the on-prem logs haven't been appeared on "Governance log" section.(Also, there was detection from Defender,…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-09-19T08:41:04.35+00:00
Endo, Soh 0 Reputation points
answered 2024-10-24T05:26:40.91+00:00
Gautam 0 Reputation points Microsoft Employee
2 answers

MS Defender: Attack Simulation Training - Unable to see all the Tenant Payloads

Hi All I have created five tenant payload in the Microsoft Defender Attack Simulation Training module. However, when I go to test, only 11 items are displayed and some of my templates are missing, yet they exist as I can see and edit them. Is there a way…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-05-02T09:37:43.8733333+00:00
Tony Anstis 5 Reputation points
answered 2024-10-21T14:34:25.6233333+00:00
Philémon Essindi 0 Reputation points
1 answer

Permissions and roles

for a user I need the role and permissions so I can read, edit, and create email threat policies for spam and phishing. are the only roles for this higher privileged ones? is there a way to adjust those permissions to lower reach?

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,679 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,218 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
211 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,173 questions
asked 2024-10-08T20:56:48.71+00:00
Son man 20 Reputation points
commented 2024-10-21T09:45:30.76+00:00
Xintao Qiao-MSFT 3,995 Reputation points Microsoft Vendor
0 answers

Vulnerability Assessment is enabled on this server or one of its underlying databases with an incompatible version.

despite continuing to use the classic configuration, we are repeatedly encountering the same error. It seems that this issue persists even though we have not actually transitioned to the express configuration. Im trying to deploy using ARM template

Azure SQL Database
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-10-03T18:10:35.47+00:00
Poovarasan Annadurai 20 Reputation points
commented 2024-10-14T16:25:12.7866667+00:00
Mahesh Kurva 805 Reputation points Microsoft Vendor
10 answers

OpenSSL vulnerabilities showing in Defender Dashboard

We have multiple devices showing up with OpenSSL vulnerabilities. It is detecting two dll files that it is flagging. Which they are libssl-3-x64.dll and libcrypto-3-x64.dll. It is flagging this for multiple different applications through out multiple…

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,418 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
211 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2023-09-22T20:14:57.2433333+00:00
Jeff Thorne 50 Reputation points
answered 2024-10-03T11:34:05.5833333+00:00
Stephen Holder 0 Reputation points
1 answer

When is Defender for Cloud Apps data location available in Australia?

Is there work in progress to have Defender for Cloud Apps available in Australia? Currently Cloud Apps default location for Australian clients, set to US.

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-09-10T02:57:06.4933333+00:00
Vivian Chau 0 Reputation points
edited an answer 2024-09-25T19:58:13.2433333+00:00
Pauline Mbabu 560 Reputation points Microsoft Employee
0 answers

code to use apps on computer instead of sign in

I can not find a 25 digit code to be able to log into the apps on the computer so i have to go to the website. how do I find the code or how do I fix it?

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-09-10T15:13:31.54+00:00
ann cumbee 0 Reputation points
commented 2024-09-24T19:39:51.5733333+00:00
Pauline Mbabu 560 Reputation points Microsoft Employee
0 answers

What else should i enable for chrome to block unsanctioned apps after i already enabled network protection on block mode and it isnt working

I am trying to block risky apps using MCAS and MDE, I have tagged the apps as unsanctioned but they are only blocked on Microsoft edge and not chrome. what should i do after enabling network protection?

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
39,794 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-08-20T07:42:33.2133333+00:00
Rejoice Okafor 0 Reputation points
edited the question 2024-09-20T07:42:08.6633333+00:00
Rakesh Gurram 9,065 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

System alert: Cloud Discovery automatic log upload error_Need to modify alert

I need to know how I can manage this alert. I want to reduce its severity from High to Medium. Is that possible? Thank you.

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-08-26T12:02:58.6933333+00:00
Eric Anderson 20 Reputation points
accepted 2024-09-17T16:43:19.1366667+00:00
Eric Anderson 20 Reputation points
1 answer

How to manage "System alert: Cloud Discovery automatic log upload error" MCAS alert/incident?

Hey All, So we've recently been getting the alert "System alert: Cloud Discovery automatic log upload error" and I'd like to know where I can manage this alert, such as changing its severity level from HIGH to MEDIUM, among other things? I…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-07-25T19:58:24.4766667+00:00
Fraley, David 0 Reputation points
answered 2024-09-17T13:36:16.2+00:00
Pauline Mbabu 560 Reputation points Microsoft Employee
1 answer

Defender Action Center Approve/Reject greyed out

Up until last week we were able to check out the Security Administrator role in order to take action on a reported email in the defender action center. Now it is greyed out after we check out the role and we are unable to approve or reject actions. For…

Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
150 questions
asked 2024-08-14T17:33:11.4333333+00:00
DrDefender 30 Reputation points
commented 2024-09-16T15:54:12.6166667+00:00
Kamel Powers 0 Reputation points