Merge pull request #652 from MicrosoftDocs/main

12/19/2024 AM Publish

articles/defender-for-cloud/file-integrity-monitoring-enable-defender-endpoint.md

@@ -44,6 +44,12 @@ To track changes to your files and registries on machines with Defender for Endp
 
 - Enable [Defender for Endpoint](/defender-endpoint/microsoft-defender-endpoint) on machines you want to monitor
 
+> [!IMPORTANT]
+> Starting at June 2025, File Integrity Monitoring (FIM) will require a minimum Defender for Endpoint (MDE) client version. Please ensure that you are at the minimum following client versions keep benefit from FIM experience in Microsoft Defender for Cloud: for Windows: 10.8760, for Linux: 30.124082.
+> - To update the Microsoft Defender for Endpoint client for Windows Servers 2012 R2 or 2016, install the standalone KB5005292 through [Microsoft Update Catalog](https://www.catalog.update.microsoft.com/Search.aspx?q=KB5005292).
+> - To update Microsoft Defender for Endpoint client for Windows servers 2019 and above, please refer to the latest Windows update. Learn more about [updating all affected machines at scale](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus)
+> - Microsoft Defender for Endpoint client for Linux is updated automatically when deployed using Defender for Cloud. You can also run a manual update via command - [Deploy updates for Microsoft Defender for Endpoint on Linux](/defender-endpoint/linux-updates)
+
 ## Enable File Integrity Monitoring
 
 ### Enable in the Azure portal

articles/defender-for-cloud/release-notes.md

@@ -34,6 +34,17 @@ This article summarizes what's new in Microsoft Defender for Cloud. It includes
 | December 17 | Preview | [Integrate Defender for Cloud CLI with Popular CI/CD Tools](#integrate-defender-for-cloud-cli-with-popular-cicd-tools) |
 | December 10 | GA | [Defender for Cloud Setup experience](#defender-for-cloud-setup-experience) |
 | December 10 | GA | [Revised interval options for Defender for Cloud scan of a cloud environment](#revised-interval-options-for-defender-for-cloud-scan-of-a-cloud-environment) |
+| December 17 | GA | [Sensitivity scanning capabilities now include Azure file shares](#sensitivity-scanning-capabilities-now-include-azure-file-shares) |
+
+### Sensitivity scanning capabilities now include Azure file shares 
+
+December 17, 2024
+
+Defender for Cloud's Security Posture Management (CSPM) sensitivity scanning capabilities now include Azure file shares in GA in addition to blob containers.
+
+Before this update, enabling the Defender CSPM plan on a subscription would automatically scan blob containers within storage accounts for sensitive data. With this update, Defender for CSPM's sensitivity scanning feature now includes file shares within those storage accounts. This enhancement improves the risk assessment and protection of sensitive storage accounts, providing a more comprehensive analysis of potential risks.
+
+Learn more about [sensitivity scanning](/azure/defender-for-cloud/concept-data-security-posture-prepare).
 
 ### Integrate Defender for Cloud CLI with Popular CI/CD Tools