Overview
Applies to:
Customers looking to initiate a scan session to produce results for their At-Rest M365 sites and files.
Solution Summary:
Cognni’s M365 Files Monitoring Scanner scans, categorizes, and maps SharePoint sites and files within your M365 tenant. Each scan is defined by a Root URL, which determines the scope and includes all sites and files under that URL.
Prerequisites:
Root URL to specify the scope of the scan
License - AR: Data At-Rest Scanner
Video:
Solution Steps:
Step 1: Navigate to Info At-Rest
Go to Configurations > Data Sources > Info At Rest
Step 2: Choose Configure Microsoft Office 365
Go to Info At-Rest > Microsoft 365 At-Rest > Configure
Step 3: Start a New Scan Session
Go to Info At-Rest > Scan Sessions > Start Scan Session
This will direct you to enter the details of the desired scan session. Each scan session produces a distinct set of data findings to review and run playbooks.
Step 3: Choose a Connection
This will provide the scan with the required permissions created by the connection.
Step 4: Enter a Session Name
This is important for navigating between data findings
NOTE: Recommended naming is "[Scan Purpose] - [Scan Initiator Name] - [Date]"
Step 5: Enter a Root URL
This will define the scope of the scan session. Cognni will scan the sites, and file stored beneath each URL.
URLs can be copied directly from your browser address bar.
Input your desired URL in the Root URL field.
Ex. The Root URL below will scan the entire ProBot domain SharePoint, OneDrive, and Teams files.
The Root URL below will scan the ProBot SharePoint site "TEST".
The Root URL below will scan the ProBot SharePoint path "TEST" > "testFolder" > "nestedFolder".
It is possible to limit scans to any individual location based on the Root URL.
Step 6: View Results
Cognni will initiate a new scan session based on the Root URL. View the live results of the scan session in the Security Posture dashboard.
Still Need Help?
Contact [email protected] for more information.