marcelzehner.ch

Microsoft Cloud App Security (MCAS) is Microsoft’s CASB (cloud access security broker). It is a service that sits between your cloud app consumers and the cloud apps they are using and acts as a security and compliance enforcement point. Before any analysis can happen or policies can be applied, the service needs connection data to understand what services are used by whom. MCAS offers a variety of options to get this data into the service such as using service connectors, log forwarders or custom uploads. In this post I will focus on custom log data that comes from a device that is not natively supported by MCAS.