Ensure that Microsoft Defender for Cloud Apps integration with Microsoft Defender for Cloud is Selected

Why This Matters

Enabling the integration between Microsoft Defender for Cloud and Microsoft Defender for Cloud Apps gives you deeper visibility into Azure Resource Manager operations, which serve as the control plane for your subscription. Without this integration, your organization may miss critical alerts related to unusual or potentially harmful actions in your Azure environment. This configuration is essential for maintaining robust incident detection and response capabilities.

What Aether365 Checks

Aether365 verifies that the "Microsoft Defender for Cloud Apps" integration setting is enabled within Microsoft Defender for Cloud for each subscription. This check appears in the Aether365 dashboard under the azure-defender-for-cloud checks section.

Microsoft references

• Security center data security
• Security center enable data collection
• Mt704062
• Mt704063
• List
• Create
• Security controls v2 incident response