Malicious files not detected by Real-Time Scan but detected by Manual Scan in Cloud App Security (CAS)

- 更新於:
- 21 Mar 2023
- 產品/版本:
- Cloud App Security
- 作業系統:

概要

Know the reason why malicious files are not being detected by Real-time Scan in OneDrive, SharePoint, and Microsoft Teams but were being detected when running Manual Scan.

詳情

The issue may be encountered when Cloud App Security (CAS) did not receive a notification at the time of file modification, commonly due to an incomplete provisioning process.

To address the issue, ensure that you have granted Cloud App Security (CAS) permissions to receive notifications from Microsoft upon any change to files on OneDrive/Sharepoint and Microsoft Teams.

For detailed steps on provisioning OneDrive/Sharepoint and Microsoft Teams, refer to this documentation.

To verify that CAS permission is granted, access the URL below:

{sharepoint_admin_site}/_layouts/15/TA_AllAppPrincipals.aspx

For example: Change https://exampleadmin.sharepoint.com/_layouts/15/online/AdminHome.aspx#/home to https://example-admin.sharepoint.com/_layouts/15/AppInv.aspx

If you need further assistance, contact Trend Micro Technical Support.