Notification policy for files added to app that are not connected

Silver Contributor

I know that I can create a File Policy to send an alert when sensitive files are added to Connected apps, but how do we do something similar for apps that are not connected? 

Do we just use the Access Level and Matched Policy filters? 

1 Reply
File (data-at-rest) policies only work for (API) connected apps and session (data-in-transit) policies only work for CAAC (SSO) connected apps. If an app is not connected one of those ways, there is nothing MDCA can do.

https://docs.microsoft.com/en-us/defender-cloud-apps/enable-instant-visibility-protection-and-govern...