Microsoft Defender for Cloud Apps Overview | Virtual Ninja Training with Heike Ritter

Caroline Lee joins us to give you a guided tour of Microsoft Defender for Cloud Apps. Learn how discovery works, connectors to define policies, and more.

Guest: Caroline Lee, Microsoft

This training series is based on the Ninja blog and brings you up to speed quickly on Microsoft 365 Defender. In every episode, our experts guide you through the powerful features and functions of Microsoft 365 Defender that help you keep your environment secure. We start with the fundamentals and dive deeper as the show continues.

SUBSCRIBE for new Microsoft Security videos every week.

#NinjaShow #Microsoft365Defender #M365Defender #microsoftsecurity #MicrosoftDefenderforCloudApps #M365

[AshKetchum]

That was a great overview. Thank you for making a simple but detailed video explaining about MDCA and its capabilities.
Kudos!!

[wigevi]

Thanks for the great material. I believe from the Spanish speakers is going to be tricky the word sanctioned. I wish it would be. Authorized and non authorized.

[BaselFawal]

Nice episode especially talking about the new shift in CASB

[AbdullahOllivierreIT]

Summary of "Microsoft Defender for Cloud Apps Overview | Virtual Ninja Training with Heike Ritter"
Introduction
• Hosts: Heike Ritter and Caroline Lee.
• Series: Microsoft 365 Defender Ninja Show.
• Focus: Microsoft Defender for Cloud Apps.
Key Points
1. Microsoft Defender for Cloud Apps (MDCA):
• Previously known as Cloud Access Security Broker (CASB).
• Protects user interactions with SaaS applications.
• Provides visibility into app usage, security, and compliance risks.
2. Capabilities of MDCA:
• Discover and Control Shadow IT: Identifies all apps in the environment, including unauthorized or risky apps.
• Information Protection: Data loss prevention, labeling sensitive files, and applying policies to prevent data leakage.
• Threat Protection: Detects anomalies like impossible travel, risky sign-ins, and suspicious OAuth behavior.
3. Deployment:
• Easy integration through API connectors.
• Seamless setup with Microsoft Defender for Endpoint.
• Partnerships with secure web gateways like Zscaler and iboss.
4. Shift to SaaS Security:
• Moving from CASB to a comprehensive SaaS security solution.
• Includes SaaS Security Posture Management (SSPM) integrated with Microsoft Secure Score.
5. Secure Score and SSPM:
• Helps improve security posture by surfacing misconfigurations and providing remediation actions.
• Focuses on actions to enhance security settings within SaaS applications.
6. App Governance:
• An add-on feature that monitors OAuth applications and API activities.
• Provides additional protection and visibility for OAuth apps.
7. Portal and Demo:
• MDCA is now integrated into the Microsoft 365 Defender portal.
• Demo of cloud discovery and app risk assessment.
• Policies can be configured to block risky applications based on their risk scores.
8. Audience Interaction:
• Encouraged viewers to ask questions and provide feedback.
• Mentioned upcoming episodes to cover more topics related to information protection and threat protection.
Conclusion
• Part 1 of the session focused on the capabilities, deployment, and new features of MDCA.
• Part 2 will cover information protection, threat protection, and app governance in more detail.

[sieffy]

Great episode! Does this cover just SaaS apps being accessed in a browser or would this also include desktop apps i.e. Microsoft Teams or any of the M365 Apps for Enterprise that are installed on a users computer?

[Nimco]

Hi where can we access these presentations ?