Forum Discussion
How to get audit logs for Ransomware activity Policy under Threat Detection
I need to fetch the logs like who modified the policy is there any powershell command I can run
HeikeRitter
Microsoft
MicrosoftHello!! Could you please specify more what policy you are referring to? ASR rules? If so, you would need to check the audit logs in Intune.
- Hello Heike,
We have a Threat Detection Policy under Cloud Apps in Microsoft 365 Defender and I need to pull the logs of that policy like when and who modified it last time .- HeikeRitterGot it, thanks for clarifying - let me check with the Defender for Cloud Apps team.
- Hello Heike,
Just wondering if you have had a chance to check this with Cloud Apps team
Thanks
Atul
