What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?

Vinod Survase 4,781 Reputation points
2023-05-10T08:02:58.4466667+00:00

What all are the capabilities of Microsoft Cloud app security in terms of monitoring the M365 apps?

Also need help on below query.

As I have implemented it in our tenant and it shows below on each apps for end users but how we can silently disable that pop up and keep monitoring the each app and actions.

User's image

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Microsoft Security | Microsoft Defender | Microsoft Defender for Identity
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud Apps
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

Accepted answer
  1. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2023-05-12T01:15:21.9266667+00:00

    Hi @Vinod Survase ,

    To address your first question, Microsoft Defender for Cloud Apps (previously known as Microsoft Cloud App Security) can monitor user activity across Exchange Online, SharePoint Online, OneDrive for Business, Teams, and more. For a full list of Office 365 activities monitored by Defender for Cloud Apps, see Search the audit log in the compliance center and Activity Filters. It can also detect and alert on suspicious behavior, such as data exfiltration, malware, and phishing attempts. Additionally, it provides advanced analytics and reporting capabilities to help you gain insights into your organization's security posture and identify areas for improvement. See Microsoft Defender for Cloud Apps - Overview

    As for your second question, if you don't want to notify users that they're being monitored, you can disable the notification message. To do this, follow these steps:

    1. Select the Settings icon (cog), and then select General settings.
    2. Under Conditional Access App Control, select User monitoring, and then clear the Notify users check box.

    The sessions will still be monitored by Microsoft Defender for Cloud Apps but the notification will go away. See: Troubleshoot - Access is monitored

    Other references:

    How to investigate anomaly detection alerts

    User activity policies

    Connect Office 365 to Microsoft Defender for Cloud Apps

    Let me know if this helps and if you have further questions.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.