About the Azure Defender for Cloud connector

The Microsoft Defender for Cloud connector enables UiPath to trigger and retrieve results from automated security scans performed by Defender for Cloud. Defender examines the data for malware, suspicious behavior, and known threat signatures. The scan results—including the final verdict, threat severity, and metadata—are passed back into the automation.

Authentication

Before automating processes, you need to establish a connection with your Azure Defender for Cloud instance. Step-by-step instructions are available in the Microsoft Defender for Cloud authentication page.

Events

The Azure Defender for Cloud connector does not currently support events.

Activity package

You can use the connection to enable the Azure Defender for Cloud activities in UiPath® Studio and build automations for the entire Microsoft Defender for Cloud capabilities suite.

API Documentation

You can read more on the Microsoft Defender for Cloud API by accessing the Microsoft documentation. The connector was tested with API version 2025-06-01.