Forum Discussion

Wesley Baeyens's avatar
Wesley Baeyens
Copper Contributor
Jan 06, 2020

Unusual volume file deletion alert office 365 not showing in cloud app

Hey guys, I just have a quick question, we receive several mails from o365 about a user triggering the unusual volume of file deletion, however we don't see any warning in cloudapp security. Even to...
Cloud App Security
Sebastien Molendijk's avatar
Sebastien Molendijk
Icon for Microsoft rankMicrosoft
Jan 13, 2020

Wesley Baeyens the detections in O365 and Cloud App Security are not the same and do not have the same logic.

The one in MCAS will take into account more criterias, like the location that was used by the user to perform the downloads.

 

Best regards

  • Christopher Brumm's avatar
    Christopher Brumm
    Copper Contributor
    Jun 23, 2020

    Sebastien Molendijk 

    We have the same situation. Is there any documentation about the logic of the mentioned alerts? Do you have any guidance for the coexistence of S&C alert policies and MCAS anomaly detections? Should we disable the S&C Alerts because the MCAS policies are more accurate?

     

    Thanks for your help!

Resources