Forum Discussion

Copper Contributor

Aug 02, 2023

How to get audit logs for Ransomware activity Policy under Threat Detection

I need to fetch the logs like who modified the policy is there any powershell command I can run

microsoft defender for endpoint

Icon for Microsoft rank

Microsoft

Aug 03, 2023

Hello!! Could you please specify more what policy you are referring to? ASR rules? If so, you would need to check the audit logs in Intune.