Ensure Microsoft Defender for Cloud Apps is enabled and configured
Why This Matters
Microsoft Defender for Cloud Apps acts as a cloud access security broker (CASB) that gives you visibility into suspicious activities across Microsoft 365. Without it enabled and configured, you may miss critical risk detection signals like impossible travel, anonymous IP address access, and suspicious inbox forwarding rules. These signals are essential for Entra Identity Protection to detect and respond to threats before they lead to data breaches.
What Aether365 Checks
This check verifies that Microsoft Defender for Cloud Apps is both enabled and properly configured for your Microsoft 365 tenant. It appears in the Aether365 dashboard under the microsoft-365 checks category.