107 questions with Microsoft Defender for Cloud Apps-related tags
Enterprise Applications and Defender
Is it possible to add Enterprise Applications created from Catalog to add to Defender and create Custom Access and Session policy in Microsoft Defender? Application is created from existing catalog in Enterprise Application and it is used for SAML…
Microsoft Defender for Individuals
Hello everyone, I am confused. I am currently looking for suitable virus protection for my private end devices and would like to use Microsoft Defender. But the footnotes say the following: [7] Does not replace existing malware protection on iOS and…
What does this settings do in the M365 defender for Devices to scan/discovery and network scan devices and what are the use cases of these?
What does this settings do in the M365 defender for Devices to scan/discovery and network scan devices and what are the use cases of these? See below screenshot.
how to use MDE or MDCA or Intune to block all websites and only allow few URLs
Hello team, Block all access web using MDE or MDCA or Intune I have a request to block all websites and only allow a few URLs in a single device. the device is onboarded with MDE, MDCA, and Intune. I can sanctioned and unsanctioned apps using MDCA,…
PowerShell Query for Microsoft Defender Portal Status
Hi, does anyone know a way to use PowerShell to snag the status info from the Microsoft Defender Portal (check out the screenshot I attached). I only can retrive the data for recommended action category. Are there any nifty REST APIs or modules that…
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify wh
Is there any settings or configurations in M365 Defender for Endpoints/Intune which does network/Wi-Fi monitoring which is being used by end users while they are working remotely or from locations with open network and not corporate or VPN and Identify…
Security recommendations in Microsoft Defender Portal
Hi I have many VA that need to be remediate but first i want to test on single device after that i want to float on all but how is that possible But when i click on request Remediation it open another page where i run on all
How to fetch Top User of Office 365 and sort it by Traffic by using powershell
I'm currently working on retrieving specific information from Office 365, and I'm facing challenges with the script. The script is currently returning only the usernames, and I also need to sort the output in descending order for traffic. Additionally,…
How to get Risk Level and Top Entities from Microsoft Defender Portal using Powershell
Hello, I'm having trouble using Powershell to obtain data for the Cloud Discovery Dashboard from the Microsoft Defender Portal. Is it possible for me to obtain data from PowerShell that precisely matches the provided image? I really need to get all the…
How to fetch Cloud Discovery Dashboard data in Microsoft Defender Portal using PowerShell?
Hello, I'm attempting to use Powershell to obtain data for the Cloud Discovery Dashboard from the Microsoft Defender Portal. Is it possible for me to obtain data from PowerShell that precisely matches the provided image? Is it possible to get that…
Differences between Microsoft Defender XDR and Sentinel
I wonder differences between Microsoft Defender XDR and Sentinel I understand that Microsoft Defender XDR consolidates security alerts (including Cloud Defender, Identity Defender, Endpoint Defender, etc.). While Sentinel can use various connectors…
Impossible d'ouvrir l'onglet "protection contre les virus et menaces"
En essayant d'installer un logiciel mon ordinateur l'a empeché. J'ai donc essayer de desactiver la protection de virus et menaces mais je me suis vite retrouvé devant une page disant: " Page non disponible, Votre administrateur informatique a limité…
Failed to remove Windows Defender Advanced Threat Protection ETW autologger. Failure code: 0xD0000121
Hello, When I run the 365 Defender "offboarding" script, it shows that it has been successfully removed and the Defender dashboard is active. When I examine the Windows Event Log, I get the error "Failed to remove Windows Defender Advanced…
Does M365 Defender & EOP has capability to detect password protected files to during the email delivery and ZAP process of the email in user mailbox? If yes how we can configure to stop such emails and put them into quarantine and stop the email delivery
Does M365 Defender & EOP has capability to detect password protected files to during the email delivery and ZAP process of the email in user mailbox? If yes how we can configure to stop such emails and put them into quarantine and stop the email…
MCAS application marked as monitored is still accessible over chrome without prompting the warning/message. But comes up with the warning on Edge.
I recently marked a cloup apps as monitor, the behavior is perfect on Microsoft edge with warning message popping up each time I access the URL, but chrome browser will allow me without warning. How can I fix this.
Which tool or service is responsible for vulnerability scanner in M365 defender suite for Endpoints, Identify, Apps, Office 365 and Data and how it works?
Which tool or service is responsible for vulnerability scanner in M365 defender suite for Endpoints, Identify, Apps, Office 365 and Data and how it works?
Azure - EASM API - Get Snapshot Metric - External Attack Surface Management
Hello, Attempting to interact with the GetSnapshot API to pull out attack insight metrics from EASM in Azure. The issue is the list of available 'metrics' has not been published so we've got no idea what to query with the API. The only one I can find is…
Do we need to Defender for Identity if I am using Microsoft Entra ID
Dear Team, Hope you are doing well. We need your support in product selection from Microsoft. I have recently taken up a new position as old person has left the company. we are using Microsoft Entra ID with 500 users and we use office 365. I currently…
bad candidate ID
Good morning, I have a certification problem, I did a first training in which my MS ID was: MS0995622920 but my second training is not assigned to my account because the candidate ID is: MS0995740172 Is it possible to change my ID and keep only…
Microsoft Defende for Cloud Apps - Scoped Profiles
Hello, I'm having trouble with a tenant. I don't have the "Scoped profiles" option on "App Tags" for Cloud Discovery. Am I missing some extra setting i need to make first? Thanks for the help