About the Azure Defender for Cloud connector
The Microsoft Defender for Cloud connector enables UiPath to trigger and retrieve results from automated security scans performed by Defender for Cloud. Defender examines the data for malware, suspicious behavior, and known threat signatures. The scan results—including the final verdict, threat severity, and metadata—are passed back into the automation.
This connector is built by UiPath and receives official support selectively. The connector supports a limited set of commonly used APIs for the target application and may cover most typical use cases. Also, they are retained in a stable state until the requirements for a new version release are met. Learn more
Authentication
Before automating processes, you need to establish a connection with your Azure Defender for Cloud instance. Step-by-step instructions are available in the Microsoft Defender for Cloud authentication page.
Events
The Azure Defender for Cloud connector does not currently support events.
Activity package
You can use the connection to enable the Azure Defender for Cloud activities in UiPath® Studio and build automations for the entire Microsoft Defender for Cloud capabilities suite.
API Documentation
You can read more on the Microsoft Defender for Cloud API by accessing the Microsoft documentation. The connector was tested with API version 2025-06-01.