Defender for Cloud App connectors

An important piece of the security puzzle is to ensure everything that you have access to is enabled and configured fully. If you have any version of Defender for Cloud Apps you should verify that the signals from Microsoft 365 are feeding into Defender for Cloud Apps.

To verify or enable this connection fully navigate to:

http://security.microsoft.com

Open the Settings option from the menu on the left. From the options that appear on the right select Cloud Apps as shown above.

Then under the Connected Apps heading select App connectors as shown above. Ensure that connectors for Microsoft 365 and Microsoft Azure appear. If they don’t you can use the Connect an app option on the menu.

To verify the Microsoft 365 app is fully enabled locate the ellipse (three dots) on the right hand side of this connector and select it as shown above.

From the menu that appears select Edit Settings.

Ensure all the settings available to you are enabled as shown. Select the Connect to Office 365 button at the bottom of the dialog to save your settings and continue.

There is no addition cost to enabling these options and when you do you are able to monitor, audit and capture the logs for:

– Azure AD Users and Groups

– Azure AD Management events

– Azure AD Sign-in events

– Azure AD Apps

– Office 365 Activities

– Office 365 files

all thanks to Defender for Cloud apps.

CIAOPS Brief 20240525

Automatic attack disruption in Microsoft Defender XDR –

https://www.youtube.com/watch?v=Hv1jTgBgs6Y

Introducing Team Copilot –

https://www.youtube.com/watch?v=4k2T5sfGIP4

Missing devices in Windows Update for Business reports? –

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/missing-devices-in-windows-update-for-business-reports/ba-p/4150561

Microsoft Security Exposure Management Graph: unveiling the power –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/microsoft-security-exposure-management-graph-unveiling-the-power/ba-p/4148546

Accelerating business transformation with industry AI and copilots –

https://www.microsoft.com/en-us/industry/blog/retail/2024/05/23/accelerating-business-transformation-with-industry-ai-and-copilots/

Cyber Signals: Inside the growing risk of gift card fraud –

https://www.microsoft.com/en-us/security/blog/2024/05/23/cyber-signals-inside-the-growing-risk-of-gift-card-fraud/

Cyber Signals: Inside the growing risk of gift card fraud –

https://www.microsoft.com/en-us/security/blog/2024/05/23/cyber-signals-inside-the-growing-risk-of-gift-card-fraud/

Increased security visibility through new Standard Logs in Microsoft Purview Audit –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/increased-security-visibility-through-new-standard-logs-in/ba-p/4144454

Copilot for Microsoft 365 | Enhance your productivity –

https://www.youtube.com/watch?v=ZWXbd2fKTu8

Copilot for Microsoft 365 | Your AI assistant for work –

https://www.youtube.com/watch?v=pqcOAvYveIc

Windows deployment with the next generation of Windows Autopilot –

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/windows-deployment-with-the-next-generation-of-windows-autopilot/ba-p/4148169

Microsoft Copilot Studio: Building copilots with agent capabilities –

https://microsoftcopilotstudio.microsoft.com/en-us/blog/microsoft-copilot-studio-building-copilots-with-agent-capabilities/

Revolutionize the way you work with automation and AI –

https://powerautomate.microsoft.com/en-us/blog/revolutionize-the-way-you-work-with-automation-and-ai/

New ways of development with copilots and Microsoft Power Platform –

https://www.microsoft.com/en-us/power-platform/blog/2024/05/21/new-ways-of-development-with-copilots-and-microsoft-power-platform/

Evolving Copilot in Windows for your workforce –

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-copilot-in-windows-for-your-workforce/ba-p/4141999

Power Apps is making it easier for developers to build with Microsoft Copilot and each other –

https://powerapps.microsoft.com/en-us/blog/power-apps-is-making-it-easier-for-developers-to-build-with-microsoft-copilot-and-each-other/

Secure and Govern Your Custom-Built AI Apps with Microsoft Purview –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/secure-and-govern-your-custom-built-ai-apps-with-microsoft/ba-p/4146187

Accelerate cloud security risk remediation with Microsoft Copilot for Security –

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/accelerate-cloud-security-risk-remediation-with-microsoft/ba-p/4143161

New agent capabilities in Microsoft Copilot unlock business value –

https://www.microsoft.com/en-us/microsoft-365/blog/2024/05/21/new-agent-capabilities-in-microsoft-copilot-unlock-business-value/

New Windows 11 security features are designed for hybrid work –

https://www.microsoft.com/en-us/security/blog/2022/09/20/new-windows-11-security-features-are-designed-for-hybrid-work/

New Windows 11 features strengthen security to address evolving cyberthreat landscape –

https://www.microsoft.com/en-us/security/blog/2024/05/20/new-windows-11-features-strengthen-security-to-address-evolving-cyberthreat-landscape/

Introducing Copilot+ PCs –

https://blogs.microsoft.com/blog/2024/05/20/introducing-copilot-pcs/

Play videos in Outlook with Microsoft Stream –

https://insider.microsoft365.com/en-us/blog/play-videos-in-outlook-with-microsoft-stream

Top features of Microsoft Teams –

https://www.youtube.com/watch?v=akvBvcNr3Uo

Meet the new Microsoft Surface Pro –

https://www.youtube.com/watch?v=jg1ZxdBFEYg

Microsoft Surface Copilot + PC Event: Everything Revealed in 13 Minutes –

https://www.youtube.com/watch?v=iHQgf3DNAr8

After hours

The puzzle of motivation – Dan Pink – https://www.youtube.com/watch?v=rrkrvAUbU9Y

Editorial

If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week.

Need to Know podcast–Episode 319

Lots of Ai and security news since the last episode. We are also on the cusp of Microsoft Build so we expect even more shortly. Although I’m a tad under the weather (apologies for sounding a bit nasal) but I felt I needed to get this episode out before the deluge of information we expect shortly from build. I think the OpenAI announcements along with those from Google are the most worthy to pay attention to here but I’m sure there should be something to interest everyone here. Listen on and enjoy!

You can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-319-ai-gets-a-voice/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

Don’t forget to give the show a rating as well as send me any feedback or suggestions you may have for the show.

Brought to you by www.ciaopspatron.com

Resources

@directorcia

Join my shared channel

CIAOPS merch store

Become a CIAOPS Patron

Project Astra: our Vision of the Future of AI assistance

Security above all else—expanding Microsoft’s Secure Future Initiative

RSA news: What’s new in Defender XDR?

Public preview: Expanding passkey support in Microsoft Entra ID

Microsoft introduces passkeys for consumer accounts

Public preview: External authentication methods in Microsoft Entra ID

Teams enhancements to the Presenter window while screensharing

Email Protection Basics in Microsoft 365 Part Five: Mastering Overrides

Protect your data and recover from insider data sabotage

SharePoint Roadmap Pitstop: April 2024

What’s New in Microsoft Teams | April 2024

What’s new in Microsoft Intune: April 2024

What’s New in Copilot | April 2024

Unveiling the Newest OneDrive Capabilities

Summary of podcast episode straight from Copilot for Microsoft 365:

Key topics:

Key Topics:

GPT-4 announcement and demo: Robert highlighted the impressive features and capabilities of the new AI model from Open AI and how it might integrate with Microsoft products. 2:23
Google Project Astra and augmented reality: Robert shared his interest in the Google demo of AI vision and voice and how it could revive the Google Glass concept. 6:47
Microsoft Build and security initiatives: Robert anticipated some major announcements from Microsoft around AI and security at the Build conference and mentioned the Secure Future initiative to address recent breaches. 8:03
Passkeys and passwordless authentication: Robert encouraged the listeners to try out the new passkeys feature for Microsoft 365 and consumer accounts to enhance their security and convenience. 12:18
Teams enhancements and features: Robert reviewed some of the new and improved functionalities in Teams, such as presenter window, voice isolation, multiple accounts, and guest sharing with Loop. 15:28
Copilot updates and improvements: Robert showcased some of the ways that Copilot can help with creating summaries, FAQs, notebooks, and templates across different Microsoft 365 apps. 21:47
OneDrive for Business capabilities: Robert summarized some of the new and enhanced features in OneDrive for Business, such as media view, offline mode, coloured folders, and export sync reports. 24:40

CIAOPS Brief 20240518

Microsoft Entra Private Access for on-prem users –

https://techcommunity.microsoft.com/t5/microsoft-entra-blog/microsoft-entra-private-access-for-on-prem-users/ba-p/3905450

How to stay in sync and on track with Microsoft Loop and Copilot –

https://www.youtube.com/watch?v=k8fBA9d_lZk

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware –

https://www.microsoft.com/en-us/security/blog/2024/05/15/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware/

The rise of the AI power user | AI at work with Microsoft’s Jared Spataro –

https://www.youtube.com/watch?v=sWrAAzGi-2w

Email Protection Basics in Microsoft 365 Part Five: Mastering Overrides –

https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/email-protection-basics-in-microsoft-365-part-five-mastering/ba-p/4139035

Introducing GPT-4o –

https://www.youtube.com/watch?v=DQacCB9tDaw

Introducing GPT-4o: OpenAI’s new flagship multimodal model now in preview on Azure –

https://azure.microsoft.com/en-us/blog/introducing-gpt-4o-openais-new-flagship-multimodal-model-now-in-preview-on-azure/

Microsoft Places | AI brings new life to flexible work –

https://www.youtube.com/watch?v=XOEpDXkjofE

Microsoft Entra delivers increased transparency –

https://techcommunity.microsoft.com/t5/microsoft-entra-blog/microsoft-entra-delivers-increased-transparency/ba-p/3796388

Microsoft Teams DLP Playbook –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/microsoft-teams-dlp-playbook/ba-p/4137462

10 (more) AI terms everyone should know –

https://news.microsoft.com/source/features/ai/10-more-ai-terms-everyone-should-know/

After hours

Project Astra: our Vision of the Future of AI assistance:–

https://www.youtube.com/watch?v=nXVvvRhiGjI

Editorial

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week.

CIAOPS Brief 20240512

Building securely: Microsoft Build 2024 – https://techcommunity.microsoft.com/t5/security-compliance-and-identity/building-securely-microsoft-build-2024/ba-p/4134981

RSA news: What’s new in Defender XDR? –

https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/rsa-news-what-s-new-in-defender-xdr/ba-p/4127538

Respond to trending threats and adopt zero-trust with Exposure Management –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/respond-to-trending-threats-and-adopt-zero-trust-with-exposure/ba-p/4130133

Introducing tamper protection for exclusions –

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/introducing-tamper-protection-for-exclusions/ba-p/3713761

More improvements to ink annotations on PDF printouts and images in OneNote –

https://insider.microsoft365.com/en-us/blog/more-improvements-to-ink-annotations-on-pdf-printouts-and-images-in-onenote

3 ways AI will impact meetings of the future | AI at work with Microsoft’s Jared Spataro –

https://www.youtube.com/watch?v=ycliGcDmvV4

Enhanced Security: Microsoft Sentinel, Defender XDR & Generative AI Unite in One Platform –

https://www.youtube.com/watch?v=riQ4kSKrq8Y

Microsoft’s latest Copilot AI boost wants to turn everyone into a prompt writing expert — and it even wants to chat with you now –

https://www.msn.com/en-us/news/technology/microsoft-s-latest-copilot-ai-boost-wants-to-turn-everyone-into-a-prompt-writing-expert-and-it-even-wants-to-chat-with-you-now/ar-BB1m67zh

Teams enhancements to the Presenter window while screensharing –

https://insider.microsoft365.com/en-us/blog/teams-enhancements-to-the-presenter-window-while-screensharing

Trello Integration with Microsoft Loop –

https://insider.microsoft365.com/en-us/blog/trello-integration-with-loop

GitHub integration with Microsoft Loop –

https://insider.microsoft365.com/en-us/blog/github-integration-with-loop

Bringing generative AI to Azure network security with new Microsoft Copilot integrations –

https://azure.microsoft.com/en-us/blog/bringing-generative-ai-to-azure-network-security-with-new-microsoft-copilot-integrations/

AI at Work Is Here. Now Comes the Hard Part –

https://www.microsoft.com/en-us/worklab/work-trend-index/ai-at-work-is-here-now-comes-the-hard-part/

Enhanced Response Action Experience from Threat Explorer –

https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/enhanced-response-action-experience-from-threat-explorer/ba-p/4130448

Welcome to the new Outlook –

https://www.youtube.com/watch?v=rjHne32NkzU

Focus on outcomes with Microsoft Intune –

https://www.youtube.com/watch?v=14sIIvPPHws

Empower multiple teams and prioritize investigations with Insider Risk Management –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/empower-multiple-teams-and-prioritize-investigations-with/ba-p/4127558

Protect your data and recover from insider data sabotage –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/protect-your-data-and-recover-from-insider-data-sabotage/ba-p/4130841

Secure your data to confidently take advantage of Generative AI with Microsoft Purview –

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/secure-your-data-to-confidently-take-advantage-of-generative-ai/ba-p/4127335

New capabilities to help you secure your AI transformation –

https://www.microsoft.com/en-us/security/blog/2024/05/06/new-capabilities-to-help-you-secure-your-ai-transformation/

7 takeaways from a year of building generative AI responsibly and at scale –

https://news.microsoft.com/source/features/ai/7-takeaways-from-a-year-of-building-generative-ai-responsibly-and-at-scale/

After hours

Vice News Cyberwar playlist – https://www.youtube.com/watch?v=ggGmxDq2HBA&list=PLw613M86o5o6w8lVktIWR0gGdOs6rLVXD

Editorial

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week.

CIAOPS Brief 20240504

Security above all else—expanding Microsoft’s Secure Future Initiative – https://www.microsoft.com/en-us/security/blog/2024/05/03/security-above-all-else-expanding-microsofts-secure-future-initiative/

Microsoft introduces passkeys for consumer accounts –

https://www.microsoft.com/en-us/security/blog/2024/05/02/microsoft-introduces-passkeys-for-consumer-accounts/

Public preview: External authentication methods in Microsoft Entra ID –

https://techcommunity.microsoft.com/t5/microsoft-entra-blog/public-preview-external-authentication-methods-in-microsoft/ba-p/4078808

Recapturing the entrepreneurial spirit in the American Rust Belt l Cloud Cultures –

https://www.youtube.com/watch?v=kkskZw0mtGI

Co-prompting with Copilot in Loop –

https://www.youtube.com/watch?v=HFDYA6vslcE

What is Microsoft Entra ID Protection? –

https://www.youtube.com/watch?v=SFkrjA48J5E

Get started with vulnerable components | Microsoft Defender Vulnerability Management –

https://www.youtube.com/watch?v=QIwrpjpqrBc

Public preview: Expanding passkey support in Microsoft Entra ID –

https://techcommunity.microsoft.com/t5/microsoft-entra-blog/public-preview-expanding-passkey-support-in-microsoft-entra-id/ba-p/4062702

Control the chaos with these calendar features in the new Outlook for Windows –

https://insider.microsoft365.com/en-us/blog/control-the-chaos-with-these-calendar-features-in-the-new-outlook-for-windows

SharePoint Roadmap Pitstop: April 2024 –

https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/sharepoint-roadmap-pitstop-april-2024/ba-p/4125173

What’s new in Microsoft Intune: April 2024 –

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/what-s-new-in-microsoft-intune-april-2024/ba-p/4122917

What’s New in Microsoft Teams | April 2024 –

https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-april-2024/ba-p/4127313

What’s New in Copilot | April 2024 –

https://techcommunity.microsoft.com/t5/copilot-for-microsoft-365/what-s-new-in-copilot-april-2024/ba-p/4123808

Announcing SharePoint advanced management innovations for the AI and Copilot era –

https://techcommunity.microsoft.com/t5/sharepoint-premium-blog/announcing-sharepoint-advanced-management-innovations-for-the-ai/ba-p/4126366

Microsoft SharePoint Roadmap Update – May 2024 –

https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/microsoft-sharepoint-roadmap-update-may-2024/ba-p/4126582

OneDrive Adds New Offline Capabilities –

https://techcommunity.microsoft.com/t5/microsoft-onedrive-blog/onedrive-adds-new-offline-capabilities/ba-p/4123644

Unveiling the Newest OneDrive Capabilities –

https://techcommunity.microsoft.com/t5/microsoft-onedrive-blog/unveiling-the-newest-onedrive-capabilities/ba-p/4122898

“Dirty stream” attack: Discovering and mitigating a common vulnerability pattern in Android apps –

https://www.microsoft.com/en-us/security/blog/2024/05/01/dirty-stream-attack-discovering-and-mitigating-a-common-vulnerability-pattern-in-android-apps/

Announcing General Availability of Microsoft Entra External ID –

https://techcommunity.microsoft.com/t5/microsoft-entra-blog/announcing-general-availability-of-microsoft-entra-external-id/ba-p/3974961

Copilot in Planner (preview) begins roll out to the new Microsoft Planner in Teams –

https://techcommunity.microsoft.com/t5/planner-blog/copilot-in-planner-preview-begins-roll-out-to-the-new-microsoft/ba-p/4119094

Windows news you can use: April 2024 –

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-news-you-can-use-april-2024/ba-p/4126660

What are passkeys? Explained in under 4 minutes –

https://www.youtube.com/watch?v=bdp8RdjV6PU

Introducing Platform Single Sign on for macOS with Microsoft Intune –

https://www.youtube.com/watch?v=yuM48ieMuls

How Do I use Loop with Megan Donald –

https://www.youtube.com/watch?v=RtYJRX21U54

Microsoft launches SharePoint eSignature integration with Adobe and Docusign –

https://techcommunity.microsoft.com/t5/sharepoint-premium-blog/microsoft-launches-sharepoint-esignature-integration-with-adobe/ba-p/4120535

Hunting in Azure subscriptions –

https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/hunting-in-azure-subscriptions/ba-p/4125875

How Do I use Loop with Kendall Camp –

https://www.youtube.com/watch?v=EWMubLLvEn0

How to use AI in 3 simple steps: Just ASK –

https://news.microsoft.com/source/features/ai/how-to-use-ai-in-3-simple-steps-just-ask/

How Do I use Loop with Amir Parsinejad –

https://www.youtube.com/watch?v=k5eYDT-yiyE

How Do I use Loop with Julie Seto –

https://www.youtube.com/watch?v=G9Gja-fuLGk

New languages supported in Copilot for Microsoft 365 –

https://techcommunity.microsoft.com/t5/copilot-for-microsoft-365/new-languages-supported-in-copilot-for-microsoft-365/ba-p/4126276

After hours

Mark Russinovich and Scott Hanselman “Healthy Debate” – https://www.youtube.com/watch?v=NTOjrAtg72Y

Editorial

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week.

Techwerks 24

bw-car-vehicle

CIAOPS Techwerks returns to Perth CBD on Wednesday the 19th of June 2024.

Cliftons Perth Ground Floor Parmelia House,
191 St Georges Terrace Perth WA 6000 AUSTRALIA

The course is limited to 20 people and you can sign up and reserve your place now! You reserve a place by completing this form:

http://bit.ly/ciaopsroi

or by sending me an email (director@ciaops.com) expressing your interest.

The content of these all day face to face workshops is driven by the attendees. That means we cover exactly what people want to see and focus on doing hands on, real world scenarios. Attendees can vote on topics they’d like to see covered prior to the day and we continue to target exactly what the small group of attendees wants to see. Thus, this is an excellent way to get really deep into the technology and have all the questions you’ve been dying to know answered. Typically, the event produces a number of best practice take aways for each attendee. So far, the greatest votes are for deeper dives into the Microsoft Cloud including Microsoft 365, Azure, Intune, Defender for Endpoint, security such as Azure Sentinel and PowerShell configuration and scripts, with a focus on enabling the technology in SMB businesses.

Recent testimonial – “I just wanted to say a big thank you to Robert for the Brisbane Techworks day. It is such a good format with each attendee asking what matters them and the whole interactive nature of the day. So much better than death by PowerPoint.” – Mike H.

The cost to attend is:

Gold Enterprise Patron = $50 ex GST

Gold Patron = $90 ex GST

Silver Patron = $180 ex GST

Bronze Patron = $360 ex GST

Non Patron = $720 ex GST

I hope to see you there.

CIAOPS Need to Know Microsoft 365 Webinar – May

laptop-eyes-technology-computer_thumb

Join me for the free monthly CIAOPS Need to Know webinar. Along with all the Microsoft Cloud news we’ll be taking a look at Microsoft Bookings.

Shortly after registering you should receive an automated email from Microsoft Teams confirming your registration, including all the event details as well as a calendar invite.

You can register for the regular monthly webinar here:

May Webinar Registrations

(If you are having issues with the above link copy and paste – https://bit.ly/n2k2405

The details are:

CIAOPS Need to Know Webinar – May 2024
Friday 31st of May 2024
11.00am – 12.00am Sydney Time

All sessions are recorded and posted to the CIAOPS Academy.

The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:

http://www.ciaopspatron.com

or purchase them individually at:

http://www.ciaopsacademy.com/

Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.

I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session and I look forward to seeing you there.