Data Protection Issues

How to Investigate OneDrive and SharePoint Files After Defender Files Page Retirement

Maira Mehtab Sep 28, 2026 869 views

Question details

Analysts need to find a new method to investigate files stored in OneDrive and SharePoint because the legacy Files page has been removed from Microsoft Defender.

Product: Microsoft Defender for Cloud Apps
Device & OS: not provided
Scenario: Investigating cloud files and resolving security alerts after the recent retirement of the legacy Files blade.
Observed behavior: The standard Files page is no longer available in the portal, leaving users unsure how to access file details, while existing documentation still references the retired page.

Before you start

Ensure you have the necessary administrative privileges in Microsoft Defender for Cloud Apps to access Information protection policies and view file details.

Solution 1Recommended

Investigate Files via Information Protection Policies

Use the Policy management section as an alternative pathway to access file information previously found on the retired Files page.

Although the dedicated Files blade has been retired, you can still access similar file details by drilling down into specific policy matches.

This method provides comparable visibility into OneDrive and SharePoint files, though the interface and navigation differ from the legacy view.

Navigate to Cloud Apps Policies

Open your Microsoft Defender portal and go to Cloud Apps > Policies > Policy management > Information protection.

Select the Policy Count

Locate the relevant policy you wish to investigate and select the count displayed in the relevant column.

Follow the File Links

Select one of the links provided underneath the count to review the related file information and complete your investigation.

Interface Differences: This workaround provides similar access for investigating files but does not completely replicate the layout of the former Files blade.

Solution 2

Consult the Microsoft Defender Q&A Forum

Seek specialized assistance for advanced file investigation queries that cannot be resolved through the policy management view.

Free Microsoft Office alternative

Looking for a secure and lightweight Office suite?

While you manage your enterprise cloud security, ensure your daily document tasks are handled efficiently. WPS Office provides a highly compatible, free alternative to Microsoft Office for creating, editing, and protecting your documents.

1. Download WPS Office: Visit the official WPS website to download the free installer for Windows, Mac, or Linux.
2. Install the Suite: Run the setup file and follow the quick installation prompts to deploy the software.
3. Open Your Documents: Easily open, edit, and save your existing Microsoft Office files without losing any formatting or layout.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight application that runs smoothly across various devices.Familiar user interface ensuring a seamless migration with zero learning curve.Built-in document encryption and password protection features for sensitive data.

microsoft office alternative - wps office

Frequently Asked Questions

Why was the Files page removed from Microsoft Defender for Cloud Apps?

Microsoft regularly updates its security portals to consolidate features and streamline the administrative experience, often replacing legacy standalone pages with integrated policy views.

Can I still view specific policy violations for OneDrive and SharePoint files?

Yes, you can navigate to Cloud Apps > Policies > Policy management > Information protection and click on the specific match counts to view files violating your data protection policies.

Is the new Information protection view identical to the old Files blade?

No, while it provides similar capabilities for investigating specific file matches, the interface and navigation differ, meaning you may need to adjust your standard incident response procedures.

Microsoft Office Security Issues