Configure Microsoft Defender for Cloud Apps for advanced scenarios

In this module, you will:

• Automatically remediate Microsoft Defender for Cloud Apps infrequent country alerts using Power Automate.
• Creating custom flows for Microsoft Defender for Cloud Apps alerts using Power Automate.
• Request manager validation for Microsoft Defender for Cloud Apps alerts using Power Automate.
• Remove a malicious inbox forwarding rule using Power Automate.

In this module, you will:

• Integrate PingOne with Defender for Cloud Apps.
• Integrate Active Directory Federation Services with Defender for Cloud Apps.

In this module, you will:

• Configure Conditional Access App Control steps for Workplace for Facebook.
• Configure Conditional Access App Control steps for Box.
• Configure Conditional Access App Control steps for Slack.

In this module, you will:

• Connect Microsoft Sentinel to Microsoft Defender for Cloud Apps
• Enrich incidents in Microsoft Sentinel with playbooks
• Triage infrequent country requests with Microsoft Defender for Cloud Apps and Microsoft Sentinel
• Connect a non-Microsoft security information and event management solution to Microsoft Defender for Cloud Apps

After completing this module, you’ll be able to:

• Create a custom indicator of compromise in Microsoft Cloud App Security.
• Observe security threats detected by Microsoft Cloud App Security in the Microsoft 365 Defender portal.
• Block apps and websites on iOS devices by using Defender for Endpoint and Microsoft Cloud App Security.
• Ensure that a log collector can communicate with Microsoft Cloud App Security from behind a proxy server.
• Interact with Microsoft Cloud App Security by using the REST API.

In this module, you will:

• Review additional blogs

• Introduction
• Automatically remediate Microsoft Defender for Cloud Apps infrequent country alerts using Power Automate
• Create custom flows for Microsoft Defender for Cloud Apps alerts
• Request manager validation for Microsoft Defender for Cloud Apps alerts
• Remove a malicious inbox forwarding rule using Power Automate
• Knowledge check
• Summary

• Introduction
• Describe how to protect apps with Defender for Cloud Apps Conditional Access App Control
• Deploy Conditional Access App Control with PingOne as the identity provider
• Deploy Conditional Access App Control with AD FS as the identity provider
• Knowledge check
• Summary

• Introduction
• Describe how to protect apps with Defender for Cloud Apps Conditional Access App Control
• Configure Conditional Access App Control for Workplace from Facebook
• Configure Conditional Access App Control for Box
• Configure Conditional Access App Control for Slack
• Knowledge check
• Summary

• Introduction
• Connect Microsoft Sentinel to Microsoft Defender for Cloud Apps
• Enrich incidents in Microsoft Sentinel with playbooks
• Triage infrequent country requests with Microsoft Defender for Cloud Apps and Microsoft Sentinel
• Connect a non-Microsoft SIEM solution to Microsoft Defender for Cloud Apps
• Knowledge check
• Summary

• Introduction
• Configure custom indicators of compromise
• Integrate the Microsoft 365 Defender portal with Microsoft Defender for Cloud Apps
• Protect iOS devices by using Microsoft Defender for Endpoint for iOS
• Configure a log collector to connect to Microsoft Defender for Cloud Apps from behind a proxy
• Use the Microsoft Defender for Cloud Apps REST API to interact with security information
• Knowledge check
• Summary

• Introduction
• Review additional blogs
• Knowledge check
• Summary