Enforcing Cloud App control with Defender for Cloud Apps

Andre Camillo, CISSP
CloudnSec
Published in
4 min readMar 12, 2024

--

What does this mean?

Particularly with the rise of SaaS-based genAI tools in the last year, protecting sensitive data usage is key, so let’s learn how to get started with this with a CASB and an agent in your fleet’s devices…

Note how this is just the tip of the iceberg. I will skip information protection policies nad setup which are next steps…

Start here

The main prerequisite for this capability to work is to go to Microsoft Defender XDR dashboard and then settings and then cloud apps.

And ensure that you find the information protection section and grant access. from defender for cloud to azure AD.

After you grant permission to azure Active Directory, you're going to see a active sign in the dashboard

Next up, very important, with some pre-reqs… Check this one box to enable MDCA and MDE integration under MDCA’s Settings in the Defender XDR portal. Here’s how:

--

--

Andre Camillo, CISSP
CloudnSec

Cloud, AI and Cyber Security tech, Career, Growth Mindset. Find my Discord &more: https://linktr.ee/acamillo . Architect @Crowdstrike. Opinions are mine!