Forum Discussion

RioHindle's avatar
RioHindle
Tin Contributor
Jul 06, 2023

MDE - Auditing

Hi All,

 

Does anyone know when they will introduce MDE Audit Logs?

 

I've checked the message centre however not appearing...

 

Also not listed in the Microsoft Documentation which breaks down auditing. 

 

Thank you. 

1 Reply

  • Sean O'Farrell's avatar
    Sean O'Farrell
    Tin Contributor
    Jul 09, 2023

    RioHindle  It is possible to use Power Automate to collect some more information using the 'Microsoft Defender ARP API' to send emails on certain alerts. An then of course if integrated with Sentinel. You can review the logs in more depth.
    https://informationprotection.ie/2023/06/24/microsoft-defender-for-endpoint-automation-with-power-automate/