124789 – Microsoft Defender for Cloud Apps: Behaviors

cloudscout.one Icon

check before: 2023-08-01


Defender, Defender for Cloud Apps, Microsoft 365 Defender


Web, World tenant


In development

Change type:

Feature update, Admin impact



A new data type in Microsoft 365 Defender Advanced Hunting. Behaviors will optimize the alerts queue by enabling security teams to focus on the most relevant alerts in their environment. They will indicate what took place in a descriptive form, attached to the MITRE tactics and techniques that are common measure most organizations follow and test their coverage against. This new data type which sits between the raw data and alert, will enable your security teams to prioritize critical alerts in your environment without having to compromise contextual information provided in a behavior that may be important to an investigation. The behaviors data will also enrich the context of related incidents and only correlate anomalies when relevant. Within Defender for Cloud Apps, we have identified some detections that are better suited as behaviors, and we are transforming them to the new data type to reflect it that can be retrieved via advanced hunting.

Change Category:


Release Phase:
General Availability, Preview



the free basic plan is required to see all details. Sign up here

A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.

Last updated 2 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!