Loading...

Cloud Discovery anomaly detection policy to be retired

Cloud Discovery anomaly detection policy to be retired

Microsoft has announced that the "Cloud Discovery anomaly detection" policy in Defender for Cloud Apps will be retired due to the high rate of false positives it generates. The company found that the policy was not contributing effectively to the overall security of organizations, and was not aligned with their strategic focus on delivering high-quality, reliable security solutions. The retirement will take place gradually between June and July 2024. Users should switch to the "App discovery policy" and set filters as needed. SOC administrators and analysts will no longer be able to access, manage and use the "Cloud Discovery anomaly detection policy" alerts in Microsoft Defender for Cloud Apps, after this change is implemented.

Microsoft recommends using the "App discovery policy" instead and creating dedicated policies, under "Trigger a policy match if all the following occur on the same day", setting filters accordingly. Users can refer to Cloud Discovery anomaly detection policy Message ID: MC783218 for additional information.

The post Cloud Discovery anomaly detection policy to be retired appeared first on M365 Admin.

Published on:

Learn more
M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

“Investigation priority score increase” Policy to be retired

The "Investigation priority score increase" policy in Microsoft Defender for Cloud Apps will be retired between June and July 2024 due to high...

1 month ago

Microsoft Purview compliance portal: Cloud Policy service audit logs for policy changes

Microsoft Purview compliance portal now offers a new feature allowing administrators to track policy change activities. Specifically, any acti...

1 month ago

Microsoft 365 Apps: Availability of the Cloud Policy service for Microsoft 365 Government GCC

Microsoft 365 GCC customers will be able to access the Cloud Policy service starting from late June 2024. This service allows administrators t...

1 month ago

Public preview announcement – support all Microsoft Defender for Cloud Apps users by Microsoft Defender XDR portal

Microsoft has announced that all admin roles supported by Microsoft Defender for Cloud Apps will have access to the entire Microsoft Defender ...

4 months ago

File policy/filter ‘policy’ retirement

If your organization is utilizing the File policy/filter ‘policy’ in the MDA file policy page, this important message concerns you. This featu...

1 year ago

Changes to Cloud App Catalog and Risk score calculation

Microsoft Defender for Cloud Apps is implementing changes to the Cloud App Catalog to improve the scoring of apps. The changes involve the rem...

1 year ago

Changes to Cloud App Catalog and Risk score calculation

Microsoft Defender for Cloud Apps is making some changes to improve the scoring of apps in the Cloud App Catalog, which will affect organizati...

1 year ago

Microsoft Defender for Cloud Apps Alert/sms retirement update

Microsoft Defender for Cloud Apps is retiring its Alerts/SMS content messages feature and recommending the use of Microsoft Power Automate ins...

1 year ago

Episode 426 - Defender for the Cloud

In this episode, Audrey Long, a Senior Security Software Engineer at Microsoft, provides insights on the Defender for the Cloud service. The p...

2 years ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy