About Microsoft Defender for Cloud
Microsoft Defender for Cloud is a cloud-native application protection platform (CNAPP) that provides unified security management and advanced threat protection across multicloud and hybrid environments, including Azure, AWS, and Google Cloud workloads, containers, and DevOps pipelines.
Security teams and vendors looking to build a Microsoft Defender for Cloud integration or route cloud security posture and alert data into their existing workflows can use Synqly to normalize and deliver findings to SIEM, SOAR, ticketing, or vulnerability management platforms without custom API development. Synqly's unified connector layer makes it straightforward to integrate Defender for Cloud alongside other cloud security tools in a single, consistent pipeline.
About the Microsoft Teams Integration
Microsoft Teams is Microsoft’s enterprise collaboration platform used by security and IT teams worldwide for real-time communication, incident coordination, and operational workflows. As Synqly’s Notifications provider, Microsoft Teams enables security platforms to push structured notification messages and security alerts into Teams channels, keeping security teams informed of critical events within the communication tools they use daily. Integrate with Microsoft Teams for notifications to deliver security event summaries, detection alerts, and workflow updates directly into Teams without building custom Teams webhook integrations.
Integration Use Cases
Query Conversation Members
Returns the members of a specific conversation. Use the user-scoped variant (query_user_conversation_members) for chats that only exist in a user's mailbox (e.g. Teams 1:1 chats).
Query Conversation Messages
Returns messages from a specific conversation. The conversationId must be obtained from query_conversations or query_user_conversations. Use the user-scoped variant (query_user_conversation_messages) for chats that only exist in a user's mailbox.
Query Conversations
Returns a list of conversations (channels or workspaces) not scoped to a specific user. Providers that can only enumerate conversations per-user return NotImplemented; use query_user_conversations instead.
Query User Conversation Members
Returns the members of a conversation scoped to a specific user. Required for providers where conversations are only addressable via the user (e.g. Teams DMs, Copilot AI sessions).
Query User Conversation Messages
Returns messages from a conversation scoped to a specific user. Required for providers where conversations are only addressable via the user (e.g. Teams DMs, Copilot AI sessions).
Query User Conversations
Returns a list of conversations scoped to a specific user — DMs, group chats, or (for AI providers) synthesised sessions.
Query Users
Returns a list of users in the connected workspace or tenant. Used to discover whose conversations can be queried.