Forum Discussion
Defender365 Alerts for high volume file deletion
All of a sudden we're getting large volumes of alerts from Defender for unusual volume of file deletions. We seldom get these and when we do it has previously turned out to be a user clearing old fil...
Did anyone else stop getting these alerts since 11/8? Looked in our Purview portal, and the alert policy isn't there anymore.
Leo_Lopez To the contrary, I had disabled the original rule and created a custom one per support's recommendation. That did seem to help, we were seeing few alerts from it, right up until about 8am CST on 11/8/22. I received 22 emails from this alert, again related to appdata folders on the local machine, over the next 48 hours.
The date does coincide though, I wonder if something was changed that day?