Skip to content

Commit 29e2576

Browse files
committed
redirect updates
1 parent 24277dc commit 29e2576

File tree

3 files changed

+20
-88
lines changed

3 files changed

+20
-88
lines changed
297 KB
Loading
59.1 KB
Loading

defender-xdr/microsoft-365-security-center-defender-cloud-apps.md

Lines changed: 20 additions & 88 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,13 @@
11
---
2-
title: Microsoft Defender for Cloud Apps in Microsoft Defender XDR
3-
description: Learn about changes from the Microsoft Defender for Cloud Apps to Microsoft Defender XDR.
4-
ms.service: defender-xdr
2+
title: Microsoft Defender for Cloud Apps in the Microsoft Defender portal
3+
description: Learn about using Microsoft Defender for Cloud Apps in the Microsoft Defender portal.ms.service: defender-xdr
54
ms.localizationpriority: medium
65
f1.keywords:
76
- NOCSH
87
ms.author: bagol
98
author: batamig
109
manager: raynew
11-
ms.date: 05/15/2024
10+
ms.date: 07/31/2024
1211
audience: ITPro
1312
ms.topic: conceptual
1413
search.appverid:
@@ -20,7 +19,7 @@ ms.collection:
2019
ms.custom: admindeeplinkDEFENDER
2120
---
2221

23-
# Microsoft Defender for Cloud Apps in Microsoft Defender XDR
22+
# Microsoft Defender for Cloud Apps in the Microsoft Defender portal
2423

2524
[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
2625

@@ -29,102 +28,35 @@ ms.custom: admindeeplinkDEFENDER
2928
- [Microsoft Defender XDR](microsoft-365-defender.md)
3029
- [Microsoft Defender for Cloud Apps](/defender-cloud-apps/)
3130

32-
Microsoft Defender for Cloud Apps is now part of Microsoft Defender XDR. The Microsoft Defender portal allows security admins to perform their security tasks in one location. This simplifies workflows, and adds the functionality of the other Microsoft Defender XDR services. Microsoft Defender XDR is the home for monitoring and managing security across your Microsoft identities, data, devices, apps, and infrastructure.
31+
Microsoft Defender for Cloud Apps is available inside the Microsoft Defender portal. The Defender portal is the home for monitoring and managing security across your Microsoft identities, data, devices, apps, and infrastructure, allowing security admins to perform their security tasks in one location, across multiple Microsoft Defender services.
3332

3433
SOC analysts can triage, investigate, and hunt across all Microsoft Defender XDR workloads, including cloud apps.
3534

36-
Defender for Cloud Apps **alerts** will continue to appear in Microsoft Defender XDR's incidents queue and alerts queue, but now with relevant content inside the alert pages available in the Microsoft Defender portal, in a unified format with the proper adaptations to each alerts type. For more information, see [Investigate incidents in Microsoft Defender XDR](investigate-incidents.md).
37-
3835
Take a look in Microsoft Defender XDR at <https://security.microsoft.com>.
3936

4037
Learn more about the benefits: [Overview of Microsoft Defender XDR](microsoft-365-defender.md).
4138

42-
## Quick reference
43-
44-
The images and the tables below list the changes in navigation between Microsoft Defender for Cloud Apps and Microsoft Defender XDR.
45-
46-
### Discover
47-
48-
> [!div class="mx-imgBorder"]
49-
> :::image type="content" source="/defender/media/defender-cloud-apps-m365-defender-discover.png" alt-text="The new locations for Cloud Discovery features in the Microsoft Defender portal" lightbox="/defender/media/defender-cloud-apps-m365-defender-discover.png":::
50-
51-
| Defender for Cloud Apps | Microsoft Defender XDR |
52-
|---------|---------|
53-
| Cloud Discover dashboard | Cloud apps -> Cloud discovery |
54-
| Discovered Apps | tab on Cloud Discovery page |
55-
| Discovered resources | tab on Cloud Discovery page |
56-
| IP addresses | tab on Cloud Discovery page |
57-
| Users | tab on Cloud Discovery page |
58-
| Devices | tab on Cloud Discovery page |
59-
| Cloud app catalog | Cloud apps -> Cloud app catalog |
60-
| Create Cloud Discovery snapshot report | On the Cloud Discovery page, under Actions |
61-
62-
### Investigate
63-
64-
> [!div class="mx-imgBorder"]
65-
> :::image type="content" source="/defender/media/defender-cloud-apps-m365-defender-investigate.png" alt-text="The new locations for Investigation features in the Microsoft Defender portal" lightbox="/defender/media/defender-cloud-apps-m365-defender-investigate.png":::
66-
67-
| Defender for Cloud Apps | Microsoft Defender XDR |
68-
|---------|---------|
69-
| Activity log | Cloud apps -> Activity log |
70-
| Files | Cloud apps -> Files |
71-
| Users and accounts | Assets -> Identities |
72-
| Security configuration | available in [Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction) |
73-
| Identity security posture | [Microsoft Defender for Identity's identity security posture assessments](/defender-for-identity/isp-overview) |
74-
| OAuth apps | Cloud apps -> OAuth apps |
75-
| Connected apps | Settings -> Cloud apps -> Connected apps |
76-
77-
### Control
78-
79-
> [!div class="mx-imgBorder"]
80-
> :::image type="content" source="/defender/media/defender-cloud-apps-m365-defender-control.png" alt-text="The new locations for Control features in the Microsoft Defender portal" lightbox="/defender/media/defender-cloud-apps-m365-defender-control.png":::
81-
82-
| Defender for Cloud Apps | Microsoft Defender XDR |
83-
|---------|---------|
84-
| Policies | Cloud apps -> Policy management. Note: Microsoft Entra ID Protection policies will be removed gradually from the Cloud apps policies list. To configure alerts from these policies, see [Configure Microsoft Entra IP alert service](investigate-alerts.md#configure-aad-ip-alert-service) |
85-
| Templates | Cloud apps -> Policy templates |
86-
87-
### Settings
88-
89-
> [!div class="mx-imgBorder"]
90-
> :::image type="content" source="/defender/media/defender-cloud-apps-m365-defender-settings.png" alt-text="The new locations for Settings in the Microsoft Defender portal" lightbox="/defender/media/defender-cloud-apps-m365-defender-settings.png":::
91-
92-
| Defender for Cloud Apps | Microsoft Defender XDR |
93-
|---------|---------|
94-
| Settings | Settings -> Cloud apps |
95-
| Settings/Governance log | Cloud apps -> Governance log |
96-
| Security extensions -> Playbooks | Settings -> Cloud apps |
97-
| Security extensions -> SIEM agents | Settings -> Cloud apps |
98-
| Security extensions -> External DLP | Settings -> Cloud apps |
99-
| Security extensions -> API tokens | Settings -> Cloud apps |
100-
| Manage admin access -> Admin roles | Permissions-> Cloud apps-> Roles |
101-
| Manage admin access -> Activity privacy permissions | Permissions-> Cloud apps-> Activity privacy permissions |
102-
| Exported reports | Reports -> Cloud apps -> Exported reports |
103-
| Scoped deployment and privacy | Settings -> Cloud Apps -> Scoped deployment and privacy |
104-
| Connected Apps / App connectors | Settings -> Cloud Apps -> Connected apps -> App Connectors |
105-
| Conditional Access App Control | Settings -> Cloud apps -> Connected apps -> Conditional Access App Control apps |
106-
| IP address ranges | Settings -> Cloud apps |
107-
| User groups | Settings -> Cloud apps |
108-
109-
The capabilities on the following pages are fully integrated into Microsoft Defender XDR, and therefore don't have their own standalone experience in Microsoft Defender XDR:
110-
111-
- [Settings > Microsoft Entra ID Protection](investigate-alerts.md)
112-
- [Settings > App Governance](/defender-cloud-apps/app-governance-get-started)
113-
- [Settings > Microsoft Defender for Identity](/defender-for-identity/deploy-defender-identity)
114-
115-
## What's changed
116-
117-
Learn about the changes that have come with the integration of Defender for Cloud Apps and Microsoft Defender XDR.
118-
119-
### Global search
39+
## Perform cloud app security tasks
40+
41+
Find Defender for Cloud Apps functionality in the Microsoft Defender portal under **Cloud Apps**. For example:
42+
43+
:::image type="content" source="media/defender-for-cloud-apps/cloud-apps.png" alt-text="Screenshot of the Defender for Cloud Apps Cloud discovery page.":::
44+
45+
## Investigate cloud app alerts
46+
47+
Defender for Cloud Apps alerts show in the Defender portal's incident and alerts queues, with relevant content inside alert pages for each type of a alert. For more information, see [Investigate incidents in Microsoft Defender XDR](investigate-incidents.md).
48+
49+
## Global search for your connected cloud apps
12050

12151
Use the Microsoft Defender portal's global search bar at the top of the page to search for connected apps in Defender for Cloud Apps.
12252

123-
:::image type="content" source="/defender/media/global-search-apps.png" alt-text="Search for connected apps.":::
53+
:::image type="content" source="../defender/media/global-search-apps.png" alt-text="Screenshot of searching for connected apps.":::
12454

12555
### Assets and identities
12656

127-
As part of the creation of a dedicated **Assets** section that spans the entire Microsoft Defender XDR experience, the **Users and Accounts** section of Defender for Cloud Apps is rebranded as the **Identities** section. No changes to functionality are expected.
57+
Use the **Assets > Identities** page to find comprehensive details about entities pulled from connected cloud applications, including a users's activity history and security alerts related to the user. For example:
58+
59+
:::image type="content" source="media/defender-for-cloud-apps/dashboard-top-users.png" alt-text="Screenshot of cloud app entities in the Identities page.":::
12860

12961
<a name='redirection-from-the-classic-microsoft-defender-for-cloud-apps-portal-to-microsoft-365-defender'></a>
13062

0 commit comments

Comments
 (0)