Forum Discussion

Rubenreis's avatar
Rubenreis
Copper Contributor
Jun 01, 2020

DefenderATP Audit logs

Hi all,

 

Where i can see all the modification by the administrator in the securitycenter.microsoft.com (Defender ATP) ? Someone changed some settings and I don't know who did

  • Bumping for visibility as also interested in how others handle this. I have previously seen that you can do something like this for device actions by using Azure Log Analytics and Azure Logic App workflow.

Resources