Security
Microsoft Defender for Cloud Apps
A cloud security solution that provides visibility into cloud application usage, protects sensitive data, governs applications, and detects anomalous behavior.
Product
Microsoft Defender for Cloud AppsMicrosoft Defender for Cloud Apps helps organizations discover cloud application usage, evaluate application risk, protect data, govern connected applications, and detect threats across Microsoft and third-party SaaS services. It provides the capabilities associated with a cloud access security broker, SaaS security posture management, application governance, and advanced threat protection.
How it works
- Cloud Discovery identifies sanctioned and unsanctioned applications used within the organization.
- The cloud application catalog helps security teams evaluate application risk.
- Application connectors provide visibility and control for supported SaaS platforms.
- Policies identify sensitive information, risky sharing, unusual downloads, and other security concerns.
- Behavioral analytics detect anomalous user and administrator activity.
- Application governance identifies risky OAuth permissions and suspicious application behavior.
- Cloud application alerts can be correlated with identity, endpoint, and email activity in Microsoft Defender XDR.
A problem it solves
A compromised employee account begins downloading an unusual volume of documents from a cloud repository. The account also grants a third-party application broad access to company data. Microsoft Defender for Cloud Apps detects the unusual activity, identifies the risky application permissions, and gives analysts the context needed to investigate and restrict access.