Microsoft Defender for Endpoint (MDE) must enable Microsoft Defender for Cloud Apps.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-275985 | MSDE-00-000800 | SV-275985r1119715_rule | CCI-001243 | medium |
| Description | ||||
| Malicious code protection mechanisms include, but are not limited to, antivirus and malware detection software. To minimize potential negative impact to the organization that can be caused by malicious code, it is imperative that malicious code is identified and eradicated. This setting forwards Microsoft Defender for Endpoint signals to Defender for Cloud Apps, giving administrators deeper visibility into both sanctioned cloud apps and shadow IT. It also grants the ability to block unauthorized applications when the custom network indicators setting is turned on. Forwarded data is stored and processed in the same location as Cloud App Security data. | ||||
| STIG | Date | |||
| Microsoft Defender for Endpoint Security Technical Implementation Guide | 2025-11-25 | |||
Related Frameworks
7 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
SI-3
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1715 mappings
3.14.1
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.14.2
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.14.3
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.14.4
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.14.5
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001243
1.00
- DISA · V1R2 · disa_xccdf · related
Details
Check Text (C-275985r1119715_chk)
Access the MDE portal as a user with at least an MDE Administrator or equivalent role:
1. In the navigation pane, select Settings >> Endpoints >> Advanced features (under General).
2. Verify the slide bar for "Microsoft Defender for Cloud Apps" is set to "On".
If the slide bar for "Microsoft Defender for Cloud Apps" is not set to "On", this is a finding.
Fix Text (F-80028r1119322_fix)
Access the MDE portal as a user with at least an MDE Administrator or equivalent role:
1. In the navigation pane, select Settings >> Endpoints >> Advanced features (under General).
2. Set the slide bar for "Microsoft Defender for Cloud Apps" to "On".