Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Mural is an online workspace where teams can organize and work together on projects. Mural holds key data for your organization, which makes it a target for malicious actors.
When you connect Mural to Defender for Cloud Apps, you get better visibility into user activity. You also get threat detection with machine learning based anomaly detections.
Main threats to your Mural environment
Connecting Mural without adequate protection exposes your organization to the following threats:
- Compromised accounts and insider threats
- Data leakage
- Insufficient security awareness
- Unmanaged bring your own device (BYOD)
How Defender for Cloud Apps helps to protect your environment
Defender for Cloud Apps can help protect your Mural environment in the following ways:
- Detect cloud threats, compromised accounts, and malicious insiders
- Use the audit trail of activities for forensic investigations
Control Mural with policies
You can use these policy types to monitor and control Mural.
Note
The Activity performed by terminated user policy requires Microsoft Entra ID as your identity provider (IdP).
| Type | Name |
|---|---|
| Built-in anomaly detection policy | Activity from anonymous IP addresses Activity from infrequent country Activity from suspicious IP addresses Impossible travel Activity performed by terminated user (requires Microsoft Entra ID as IdP) Multiple failed login attempts |
| Activity policy | Build a custom policy with the Mural Audit Log API. |
For more information about creating policies, see Create a policy.
Automate governance controls
You can also apply and automate these Mural governance actions to fix detected threats:
| Type | Action |
|---|---|
| User governance | Notify user on alert (via Microsoft Entra ID) Require user to sign in again (via Microsoft Entra ID) Suspend user (via Microsoft Entra ID) |
To learn more about fixing threats from apps, see Governing connected apps.
Connect Mural to Microsoft Defender for Cloud Apps
The following instructions explain how to connect Microsoft Defender for Cloud Apps to your existing Mural account using the App Connector APIs. This connection gives you visibility into and control over Mural usage.
Prerequisites
- A Mural enterprise account.
- You must be signed-in as an admin to Mural.
Connect Mural to Defender for Cloud Apps
Perform the following steps to connect Mural to Defender for Cloud Apps:
- Sign into your Mural account.
- Create an API Key and then copy the key.
- In the Microsoft Defender portal, select Settings > Cloud Apps > Connected Apps > App Connectors > Connect an app > Mural.
- In the connection wizard, enter your instance name, and then select Next.
- Paste the API key you copied from the Mural portal and then select Submit.
After the connection is established, Defender for Cloud Apps starts fetching Mural audit logs. Because Mural's API logs are delayed by 48 hours, audit log ingestion into Defender for Cloud Apps is also delayed by 48 hours.
Next steps
If you have any problems connecting the app, see Troubleshooting App Connectors.
Learn how to Control cloud apps with policies.