Forum Discussion
Find the file creation time/date in Microsoft 365 Defender Alerts for blocked software
In the portal it tells you the SHA1 hash and the path of the file(s) in question but does not indicate when the file was created. This file in particular was found during a routine scan and I would l...
Click on the file you want to find timeline, click on the [...] button and select Go hunt
then change the time stamp period as you want and click Run query
- That is all well and good if you know roughly when the file was created but in a situation where something has been sitting dormant for a while it could outlive the log retention.
