Microsoft Defender for Cloud Apps
by Microsoft
Cloud access security broker (CASB) for SaaS apps; the REST API returns alerts, activities, files and discovered cloud apps.
- Category
- IT, Security & Monitoring
- Type
- Cloud security
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- OAuth 2.0, Access token
02Data
What you can sync.
- Alerts
- Activities
- Files
- Discovered apps
- Entities
Join Microsoft Defender for Cloud Apps alerts with assets and people data to see risk by team, system and owner.
Need more? Name any other Microsoft Defender for Cloud Apps data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- OAuth 2.0 (client ID, client secret, refresh token)
- An access token
Microsoft Defender for Cloud Apps uses OAuth 2.0 (client ID, client secret, refresh token) or an access token. You add the credentials once, when the AI asks for them, and it tells you where to create them in Microsoft if you need help.
04How it works
How it works in DataMind.
-
Pick Microsoft Defender for Cloud Apps.
Open Lake, pick Microsoft Defender for Cloud Apps in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the Microsoft Defender for Cloud Apps API docs.
-
Answer a few questions.
The AI reads the Microsoft Defender for Cloud Apps documentation, then asks which credentials you will use, which data to sync (for example alerts and activities), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then Microsoft Defender for Cloud Apps data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.