Cloud Security
Falcon Data Security for SaaS Enhances Microsoft 365 Data Protection
Falcon Data Security for SaaS now protects SharePoint, OneDrive, and Copilot, enabling automated discovery and classification of sensitive data across Microsoft 365. The update applies to all tenants with the service enabled and offers tighter compliance controls. Defenders should enable coverage, set classification policies, and integrate alerts into existing workflows.
What Happened
Falcon Data Security for SaaS has been updated to extend its protection into Microsoft 365’s SharePoint, OneDrive, and Copilot services. The update enables automated discovery and classification of sensitive data across these platforms.
Impact
Organizations using Microsoft 365 for collaboration and file storage now benefit from continuous monitoring of sensitive content. The feature applies to all tenants that have enabled Falcon Data Security for SaaS.
What to Do
Defenders should:
- Verify that Falcon Data Security for SaaS is enabled for all Microsoft 365 tenants.
- Configure data classification policies to flag PII, PHI, and other regulated data.
- Integrate generated alerts into existing SIEM or SOAR workflows.
- Review Copilot usage logs for anomalous data exposure.
- Schedule periodic audits of SharePoint and OneDrive libraries.
Enabling the new SharePoint/OneDrive/Copilot coverage reduces the risk of accidental data leaks and improves compliance posture.
Related articles
Falcon Cloud Security Adds Third‑Party App Insights and AI‑Enhanced Remediation
CrowdStrike’s latest Falcon Cloud Security update delivers visibility into third‑party SaaS applications and AI‑driven remediation. Defenders can now automatically identify risky app activity and apply containment actions, reducing response time.
Read briefing
Proofpoint Expands AI Investigations to Microsoft 365 and Insider Risk Platforms
Proofpoint has rolled out updates to its security portfolio, adding AI-powered investigative capabilities for Microsoft 365 environments alongside enhanced tracking for enterprise AI usage. The updates aim to streamline incident triage and improve visibility into potential data exfiltration vectors involving generative AI tools.
Read briefing
Falcon Cloud Security Adds Third‑Party App Insights and AI‑Enhanced Remediation
CrowdStrike has updated Falcon Cloud Security to provide visibility into third‑party applications and AI‑driven remediation. The new features give SecOps teams a consolidated view of SaaS integrations and automated playbooks. Defenders should enable the module, review insights, and integrate remediation workflows with existing SOAR tools.
Read briefing
Falcon Cloud Security Adds Third‑Party App Visibility and AI‑Driven Remediation
CrowdStrike’s latest Falcon Cloud Security release now provides granular insights into third‑party SaaS applications and an AI engine that prioritizes remediation steps. Defenders can quickly identify over‑privileged apps, apply policy changes, and automate response workflows.
Read briefing