Microsoft 365 Defender Blog

Options
1,685
Simaya_Ouli on Sep 22 2022 06:40 AM
3,399
assafyatziv on Sep 22 2022 06:39 AM
3,021
Heike Ritter on Sep 01 2022 10:13 AM
10.1K
Tali Ash on Aug 24 2022 06:15 AM
6,424
doredry on Aug 24 2022 06:00 AM
6,227
Naama Schlesinger on Aug 18 2022 11:24 AM
5,047
Keith_Fleming on Aug 08 2022 06:00 AM
5,818
Heike Ritter on Aug 01 2022 09:13 AM
9,298
Heike Ritter on Jul 01 2022 08:21 AM
4,785
Yulia_Zhurbinsky on Jun 23 2022 01:31 PM
4,987
Oren_Saban on Jun 20 2022 08:12 AM
2,497
Idan_Pelleg on Jun 16 2022 05:46 AM
2,661
Michael Shalev on May 18 2022 12:27 AM
2,174
Anand Menon on May 13 2022 05:24 PM
12.9K
assafyatziv on May 12 2022 09:31 AM
5,732
Tali Ash on Mar 09 2022 09:48 AM
3,136
Idan_Pelleg on Mar 06 2022 01:07 AM
5,690
Oren_Saban on Feb 22 2022 01:51 PM
3,412
Michael Shalev on Feb 17 2022 10:17 AM
4,389
assafyatziv on Dec 15 2021 03:15 AM
3,756
Chris Hallum on Dec 07 2021 10:57 AM
7,678
Tali Ash on Nov 02 2021 01:13 PM
3,441
Idan_Pelleg on Oct 03 2021 07:29 AM
13.2K
Idan_Pelleg on Sep 02 2021 08:22 AM
5,493
VipulPandey on Aug 24 2021 05:33 AM
13.5K
Heike Ritter on Aug 13 2021 10:05 AM
5,716
Heike Ritter on Aug 04 2021 11:33 AM
5,083
Aviv_Eldan on Jul 08 2021 09:18 AM
3,410
Heike Ritter on Jun 15 2021 10:37 AM

Latest Comments

Do you happen to know if this will be able to delineate MDE alerts which have had suppression applied or if excludes them altogether? The old v1 Alerts Graph excluded them but the new Streaming API does not which forced us to stay with SIEM API because of the APIs inability to do this. Roadmap wise,...
0 Likes
Hello @Keith_Fleming , thank you. Currently, I do not have a requirement for this. I just thought about it, because it might become a requirement to have multiple session policies targeting the same group.
0 Likes
Hi @MOD-A830, The scoping for the label occurs in the CA policy in this case with the use of authentication context. If you do have multiple policies scoped to SharePoint that overlap with multiple groups its possible you might seem some unexpected behavior. Currently the Defender for Cloud Apps pol...
0 Likes
Can this policy (in Defender for Cloud Apps) conflict with any other policies that are filtered to SharePoint Online as app? For example, if I want to block file download for sensitive data from SharePoint for a specific group, then I would scope my CA policy to this group and add a filter in Defend...
0 Likes
Is there any similar functionality coming to Microsoft Sentinel?
0 Likes