Microsoft 365 Defender Blog

Options
1,619
Simaya_Ouli on Sep 22 2022 06:40 AM
3,229
assafyatziv on Sep 22 2022 06:39 AM
2,992
Heike Ritter on Sep 01 2022 10:13 AM
10.1K
Tali Ash on Aug 24 2022 06:15 AM
6,401
doredry on Aug 24 2022 06:00 AM
6,178
Naama Schlesinger on Aug 18 2022 11:24 AM
5,033
Keith_Fleming on Aug 08 2022 06:00 AM
5,816
Heike Ritter on Aug 01 2022 09:13 AM
9,295
Heike Ritter on Jul 01 2022 08:21 AM
4,770
Yulia_Zhurbinsky on Jun 23 2022 01:31 PM
4,970
Oren_Saban on Jun 20 2022 08:12 AM
2,493
Idan_Pelleg on Jun 16 2022 05:46 AM
2,655
Michael Shalev on May 18 2022 12:27 AM
2,167
Anand Menon on May 13 2022 05:24 PM
12.9K
assafyatziv on May 12 2022 09:31 AM
5,728
Tali Ash on Mar 09 2022 09:48 AM
3,134
Idan_Pelleg on Mar 06 2022 01:07 AM
5,681
Oren_Saban on Feb 22 2022 01:51 PM
3,404
Michael Shalev on Feb 17 2022 10:17 AM
4,380
assafyatziv on Dec 15 2021 03:15 AM
3,743
Chris Hallum on Dec 07 2021 10:57 AM
7,674
Tali Ash on Nov 02 2021 01:13 PM
3,437
Idan_Pelleg on Oct 03 2021 07:29 AM
13.2K
Idan_Pelleg on Sep 02 2021 08:22 AM
5,489
VipulPandey on Aug 24 2021 05:33 AM
13.5K
Heike Ritter on Aug 13 2021 10:05 AM
5,713
Heike Ritter on Aug 04 2021 11:33 AM
5,079
Aviv_Eldan on Jul 08 2021 09:18 AM
3,409
Heike Ritter on Jun 15 2021 10:37 AM

Latest Comments

Do you happen to know if this will be able to delineate MDE alerts which have had suppression applied or if excludes them altogether? The old v1 Alerts Graph excluded them but the new Streaming API does not which forced us to stay with SIEM API because of the APIs inability to do this. Roadmap wise,...
0 Likes
Hello @Keith_Fleming , thank you. Currently, I do not have a requirement for this. I just thought about it, because it might become a requirement to have multiple session policies targeting the same group.
0 Likes
Hi @MOD-A830, The scoping for the label occurs in the CA policy in this case with the use of authentication context. If you do have multiple policies scoped to SharePoint that overlap with multiple groups its possible you might seem some unexpected behavior. Currently the Defender for Cloud Apps pol...
0 Likes
Can this policy (in Defender for Cloud Apps) conflict with any other policies that are filtered to SharePoint Online as app? For example, if I want to block file download for sensitive data from SharePoint for a specific group, then I would scope my CA policy to this group and add a filter in Defend...
0 Likes
Is there any similar functionality coming to Microsoft Sentinel?
0 Likes