Microsoft Defender for Cloud Apps (v2.2.32)
Microsoft Cloud App Security Integration, a Cloud Access Security Broker that supports various deployment modes
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Default data source
- Microsoft Defender for Cloud Apps Event Collector
- Categories
- Cloud Security
Integrations (2)
- Microsoft Defender for Cloud Apps Event Collector
- Microsoft Defender for Cloud Apps
Layouts (1)
- MicrosoftCloudAppSecurity
Modeling rules (1)
- Microsoft Defender Cloud Apps Modeling Rule
Parsing rules (1)
- Microsoft Cloud App Security Parsing Rule
README
License Information
Available for E3 (EMS), E5, and standalone licenses.
Note: Time parsing is supported only when the field “timestamp” is in epoch milliseconds format (for example 1674208800123).