Defender for cloud apps

Question

The requirement is when the user uploads any files/documents from personal owned Android/IOS managed through intune to (OneDrive for business).

• Files should be scanned for malicious content, including Links and any file type, document, file, etc..
• Is there any policy available for my requirements in Defender for cloud apps?

Answer 1

Based on my research, This is the process that MDO does when files are uploaded

• https://learn.microsoft.com/en-us/defender-office-365/anti-malware-protection-for-spo-odfb-teams-about
• https://learn.microsoft.com/en-us/defender-office-365/anti-malware-protection-for-spo-odfb-teams-about#what-happens-if-an-infected-file-is-uploaded-to-sharepoint-online
  • A user uploads a file to SharePoint Online.
  • SharePoint Online, as part of its virus scanning processes, later determines if the file meets the criteria for a scan.
  • If the file meets the criteria for a scan, the virus detection engine scans the file.
  • If a virus is found within the scanned file, the virus engine sets a property on the file that indicates the file is infected.