Skip to main content Link Menu Expand (external link) Document Search Copy Copied
TechWorkshop L300 XDR SOC Operations

Task 07: Defender for Cloud Apps (MDCA) - Enable MDE integration & (optional) sample logs

  1. In the leftmost pane, go to System, then Settings.

  2. Select Cloud Apps.

  3. In the Cloud apps page menu, under the Cloud Discovery section, if you see Microsoft Defender for Endpoint, then the integration of MDE with Defender XDR is already in place.

    yfaaw252.jpg

    This lets MDE endpoint signals (from your VM) populate Cloud Discovery - no on-prem or proxies required.

  4. (OPTIONAL) Manual log upload: You can upload sample firewall/proxy logs in the Cloud Discovery blade to quickly populate SaaS usage if you want richer data upfront:

    1. On the same page, under Cloud Discovery, select Snapshot reports.

    2. Select Create snapshot report and use the wizard to upload your log files for immediate analysis.