{"id":11218,"date":"2025-04-25T09:01:39","date_gmt":"2025-04-25T00:01:39","guid":{"rendered":"https:\/\/m365jp.net\/?p=11218"},"modified":"2025-04-25T09:04:58","modified_gmt":"2025-04-25T00:04:58","slug":"mc1061724-microsoft-defender-for-cloud-apps-improvements-to-threat-protection-capabilities","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-04-25-mc1061724-microsoft-defender-for-cloud-apps-improvements-to-threat-protection-capabilities","title":{"rendered":"MC1061724 | Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1061724 | Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>04\/24\/2025 23:16:50<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>04\/24\/2025 23:16:19<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>08\/25\/2025 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>Coming soon for Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities. We will  <b>implement a new dynamic model for threat protection detections and alerts<\/b>. This change aims to improve and maintain a high signal-to-noise Ratio (SNR) for detections.<\/p>\n<p>[When this will happen:]  <\/p>\n<p>General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out the first batch of policies early June 2025 and expect to complete by early July 2025.  <\/p>\n<p>[How this will affect your organization:]<\/p>\n<p>Our new dynamic model allows our security researchers an ability to<b> <\/b><i>respond faster to new threats<\/i>, to update detection logic based on the evolving threat landscape. This means that detections can be added, removed, or modified dynamically to  <i>ensure optimal protection against emerging threats.<\/i> Note: These are research-driven detections, so Customers will enjoy the protection without the need to actively configure them.  <\/p>\n<p>This rollout will be seamless, and you will continue to receive the same standard of protection without disruption to the provided security coverage. After rollout begins, we will include the migrated policies in  <a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/anomaly-detection-policy\" target=\"_blank\" style=\"\">  Create anomaly detection policies &#8211; Microsoft Defender for Cloud Apps | Microsoft Learn<\/a> (to be updated).<\/p>\n<p>The first batch of policies will be:<\/p>\n<ol>\n<li>Suspicious inbox manipulation rule<\/li>\n<li>Suspicious email deletion activity<\/li>\n<li>Suspicious email forwarding rule<\/li>\n<li>Activity from an anonymous proxy<\/li>\n<li>Activity from a botnet-associated IP address<\/li>\n<\/ol>\n<p>Note: In addition to the policies in the first batch mentioned above, all other OOTB policies will eventually be migrated to the new dynamic model.<\/p>\n<p>After this rollout:  <\/p>\n<ul>\n<li>By applying the new dynamic model, we aim to provide more accurate and timely threat detections, enhancing your overall organization security.<\/li>\n<li>In some cases, policies may be split into several different detections and alerts in order to provide an additional degree of protection and better understanding for the SOC teams on the threat etymology.<\/li>\n<li>For several months during the gradual migration of OOTB policies, the policies will be disabled but still temporarily visible in Defender for Cloud Apps.  <i>After the migration has completed, we will remove the policies from the legacy policies page,  <\/i>and we will send a separate MC post about this removal.<\/li>\n<\/ul>\n<p>This migration will be seamless and available by default. However, please note that we will disable legacy policies and their configured governance actions. If you wish to retain governance actions, please re-enable the policies from the legacy policies   page at Defender portal &gt; Cloud apps &gt; Policy management page.<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin settings:&gt;&lt;br \/&gt;&lt;\/p&gt;&lt;p&gt;[What you need to do to prepare:]&lt;\/p&gt;&lt;p&gt;This &lt;span style=\" background-color:=\"\" rgb(255,=\"\" 255,=\"\" 0);?=\"\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/a8459765-2e00-472d-a761-412a9bad31a2\"><\/p>\n<p>This rollout will happen automatically by the specified dates with no admin action required before the rollout. Review your current configuration to assess the impact on your organization. You may want to notify your users about this change and update any   relevant documentation.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>Microsoft Defender for Cloud Apps \u306e\u8fd1\u65e5\u516c\u958b\u4e88\u5b9a: \u8105\u5a01\u4fdd\u8b77\u6a5f\u80fd\u306e\u6539\u5584\u3002 <b>\u8105\u5a01\u4fdd\u8b77\u306e\u691c\u51fa\u3068\u30a2\u30e9\u30fc\u30c8\u306e\u305f\u3081\u306e\u65b0\u3057\u3044\u52d5\u7684\u30e2\u30c7\u30eb\u3092\u5b9f\u88c5\u3057\u307e\u3059<\/b>\u3002\u3053\u306e\u5909\u66f4\u306f\u3001\u691c\u51fa\u306e\u305f\u3081\u306e\u9ad8\u3044\u4fe1\u53f7\u5bfe\u96d1\u97f3\u6bd4(SNR)\u3092\u6539\u5584\u3057\u3001\u7dad\u6301\u3059\u308b\u3053\u3068\u3092\u76ee\u7684\u3068\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DoD): 2025 \u5e74 6 \u6708\u521d\u65ec\u306b\u30dd\u30ea\u30b7\u30fc\u306e\u6700\u521d\u306e\u30d0\u30c3\u30c1\u306e\u5c55\u958b\u3092\u958b\u59cb\u3057\u30012025 \u5e74 7 \u6708\u4e0a\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n<p>\u5f53\u793e\u306e\u65b0\u3057\u3044\u52d5\u7684\u30e2\u30c7\u30eb\u306b\u3088\u308a\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u306f<b><\/b><i>\u65b0\u305f\u306a\u8105\u5a01\u306b\u8fc5\u901f\u306b\u5bfe\u5fdc\u3057<\/i>\u3001\u9032\u5316\u3059\u308b\u8105\u5a01\u306e\u72b6\u6cc1\u306b\u57fa\u3065\u3044\u3066\u691c\u51fa\u30ed\u30b8\u30c3\u30af\u3092\u66f4\u65b0\u3067\u304d\u307e\u3059\u3002\u3064\u307e\u308a\u3001\u691c\u51fa\u3092\u52d5\u7684\u306b\u8ffd\u52a0\u3001\u524a\u9664\u3001\u307e\u305f\u306f\u5909\u66f4\u3057\u3066\u3001<i>\u65b0\u305f\u306a\u8105\u5a01\u306b\u5bfe\u3059\u308b\u6700\u9069\u306a\u4fdd\u8b77\u3092\u78ba\u4fdd\u3067\u304d\u307e\u3059\u3002<\/i>\u6ce8: \u3053\u308c\u3089\u306f\u7814\u7a76\u4e3b\u5c0e\u578b\u306e\u691c\u51fa\u3067\u3042\u308b\u305f\u3081\u3001\u304a\u5ba2\u69d8\u306f\u7a4d\u6975\u7684\u306b\u8a2d\u5b9a\u3059\u308b\u3053\u3068\u306a\u304f\u4fdd\u8b77\u3092\u5229\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u30b7\u30fc\u30e0\u30ec\u30b9\u306b\u884c\u308f\u308c\u3001\u63d0\u4f9b\u3055\u308c\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7bc4\u56f2\u3092\u4e2d\u65ad\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u540c\u3058\u6a19\u6e96\u306e\u4fdd\u8b77\u3092\u5f15\u304d\u7d9a\u304d\u53d7\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u304c\u958b\u59cb\u3055\u308c\u305f\u3089\u3001\u79fb\u884c\u3055\u308c\u305f\u30dd\u30ea\u30b7\u30fc\u3092\u300c  <a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/anomaly-detection-policy\" target=\"_blank\" style=\"\">  \u7570\u5e38\u691c\u51fa\u30dd\u30ea\u30b7\u30fc\u306e\u4f5c\u6210 &#8211; Microsoft Defender for Cloud Apps |Microsoft Learn<\/a> (\u66f4\u65b0\u4e88\u5b9a)\u3002<\/p>\n<p>\u30dd\u30ea\u30b7\u30fc\u306e\u6700\u521d\u306e\u30d0\u30c3\u30c1\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\u4e0d\u5be9\u306a\u53d7\u4fe1\u30c8\u30ec\u30a4\u64cd\u4f5c\u30eb\u30fc\u30eb<\/li>\n<li>\u4e0d\u5be9\u306a\u30e1\u30fc\u30eb\u524a\u9664\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3<\/li>\n<li>\u4e0d\u5be9\u306a\u30e1\u30fc\u30eb\u8ee2\u9001\u30eb\u30fc\u30eb<\/li>\n<li>\u533f\u540d\u30d7\u30ed\u30ad\u30b7\u304b\u3089\u306e\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3<\/li>\n<li>\u30dc\u30c3\u30c8\u30cd\u30c3\u30c8\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u305fIP\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u306e\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3<\/li>\n<\/ol>\n<p>\u6ce8: \u4e0a\u8a18\u306e\u6700\u521d\u306e\u30d0\u30c3\u30c1\u306e\u30dd\u30ea\u30b7\u30fc\u306b\u52a0\u3048\u3066\u3001\u4ed6\u306e\u3059\u3079\u3066\u306e OOTB \u30dd\u30ea\u30b7\u30fc\u306f\u3001\u6700\u7d42\u7684\u306b\u65b0\u3057\u3044\u52d5\u7684\u30e2\u30c7\u30eb\u306b\u79fb\u884c\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u5f8c:<\/p>\n<ul>\n<li>\u65b0\u3057\u3044\u52d5\u7684\u30e2\u30c7\u30eb\u3092\u9069\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u3088\u308a\u6b63\u78ba\u3067\u30bf\u30a4\u30e0\u30ea\u30fc\u306a\u8105\u5a01\u691c\u51fa\u3092\u63d0\u4f9b\u3057\u3001\u7d44\u7e54\u5168\u4f53\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3059\u308b\u3053\u3068\u3092\u76ee\u6307\u3057\u3066\u3044\u307e\u3059\u3002<\/li>\n<li>\u5834\u5408\u306b\u3088\u3063\u3066\u306f\u3001\u30dd\u30ea\u30b7\u30fc\u3092\u3044\u304f\u3064\u304b\u306e\u7570\u306a\u308b\u691c\u51fa\u3068\u30a2\u30e9\u30fc\u30c8\u306b\u5206\u5272\u3057\u3066\u3001\u8105\u5a01\u306e\u8a9e\u6e90\u306b\u95a2\u3059\u308b SOC \u30c1\u30fc\u30e0\u306e\u4fdd\u8b77\u3068\u7406\u89e3\u3092\u6df1\u3081\u308b\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<li>OOTB \u30dd\u30ea\u30b7\u30fc\u306e\u6bb5\u968e\u7684\u306a\u79fb\u884c\u671f\u9593\u4e2d\u306e\u6570\u304b\u6708\u9593\u3001\u30dd\u30ea\u30b7\u30fc\u306f\u7121\u52b9\u306b\u306a\u308a\u307e\u3059\u304c\u3001Defender for Cloud Apps \u306b\u4e00\u6642\u7684\u306b\u5f15\u304d\u7d9a\u304d\u8868\u793a\u3055\u308c\u307e\u3059\u3002  <i>\u79fb\u884c\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u30ec\u30ac\u30b7 \u30dd\u30ea\u30b7\u30fc \u30da\u30fc\u30b8\u304b\u3089\u30dd\u30ea\u30b7\u30fc\u3092\u524a\u9664\u3057\u3001 <\/i>\u3053\u306e\u524a\u9664\u306b\u95a2\u3059\u308b\u5225\u306e MC \u6295\u7a3f\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002<\/li>\n<\/ul>\n<p>\u3053\u306e\u79fb\u884c\u306f\u30b7\u30fc\u30e0\u30ec\u30b9\u3067\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5229\u7528\u3067\u304d\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u30ec\u30ac\u30b7 \u30dd\u30ea\u30b7\u30fc\u3068\u305d\u308c\u3092\u69cb\u6210\u3059\u308b\u30ac\u30d0\u30ca\u30f3\u30b9 \u30a2\u30af\u30b7\u30e7\u30f3\u306f\u7121\u52b9\u306b\u306a\u308b\u3053\u3068\u306b\u6ce8\u610f\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u30ac\u30d0\u30ca\u30f3\u30b9 \u30a2\u30af\u30b7\u30e7\u30f3\u3092\u4fdd\u6301\u3059\u308b\u5834\u5408\u306f\u3001Defender \u30dd\u30fc\u30bf\u30eb\u306e\u30ec\u30ac\u30b7 \u30dd\u30ea\u30b7\u30fc \u30da\u30fc\u30b8&gt;\u30af\u30e9\u30a6\u30c9 \u30a2\u30d7\u30ea&gt;\u30dd\u30ea\u30b7\u30fc\u7ba1\u7406\u30da\u30fc\u30b8\u304b\u3089\u30dd\u30ea\u30b7\u30fc\u3092\u518d\u5ea6\u6709\u52b9\u306b\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin settings:&gt;&lt;br \/&gt;&lt;\/p&gt;&lt;p&gt;[What you need to do to prepare:]&lt;\/p&gt;&lt;p&gt;This &lt;span style=\" background-color:=\"\" rgb(255,=\"\" 255,=\"\" 0);?=\"\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/a8459765-2e00-472d-a761-412a9bad31a2\"><\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u7ba1\u7406\u8005\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002\u73fe\u5728\u306e\u69cb\u6210\u3092\u78ba\u8a8d\u3057\u3066\u3001\u7d44\u7e54\u3078\u306e\u5f71\u97ff\u3092\u8a55\u4fa1\u3057\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u901a\u77e5\u3057\u3001\u95a2\u9023\u3059\u308b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u304a\u3059\u3059\u3081\u3057\u307e\u3059\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1061724 | Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities Classification p [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11218","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/11218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=11218"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/11218\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=11218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=11218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=11218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}