Blog Post

Microsoft Sentinel Blog
3 MIN READ

Auditing Microsoft Sentinel activities

Sarah_Young's avatar
Sarah_Young
Icon for Microsoft rankMicrosoft
Sep 29, 2020
Many customers require the ability to audit what happens in their SOC environment for both internal and external compliance requirements. It is important to understand the who/what/when’s of activiti...
Updated Nov 02, 2021
Version 5.0
detection
hunting
investigation
microsoft sentinel
security
Luizao_f's avatar
Luizao_f
Brass Contributor
Dec 14, 2020

Good afternoon people! I need to do an audit process to identify which rules were created, changed or deleted, however, through the logs in the [AzureActivity] table, I can see only the rule id, which is not readable and identifiable.

 

Is there a way to find the name of the rule that has been modified?