How to Enable Malware Scanning for Files in Azure Blob Storage via Intune?

@Soberanis, Omar, Thanks for posting in Q&A. After reading the following link, I find it seems Microsoft Defender for Storage can scan files uploaded to Azure Blob Storage, including those uploaded through Intune to its designated workspace. This feature provides near real-time detection against malicious content by automatically scanning blobs when they are uploaded or modified

https://learn.microsoft.com/en-us/azure/defender-for-cloud/on-upload-malware-scanning

To enable on-upload malware scanning for your Azure Blob Storage, you need to:

1. Ensure Permissions: You must have the Owner or Contributor role on the subscription or storage account, or specific roles with the necessary permissions.
2. Enable Defender for Storage: This must be enabled on the subscription or individual storage accounts.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/on-upload-malware-scanning#enable-on-upload-malware-scanning

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.