Event details
MicrosoftQuestion from the live event:
Someone raised a good point. If I understand correctly, the approach here is to capture prompts based on certain risk criteria rather than collecting everything. Some competitors capture all activity using appliances or virtual machines and then let analysts search through everything. Is Microsoft’s approach to capture prompts selectively based on risk criteria, or is there a plan to capture everything in a similar way?
David_BroaddusAnswer:
We capture everything by default, but you can consent or not to capture everything giving configurability and flexibility to administrators by default to decide to capture or take action.
After this you can make decisions based on your role and outcomes which is also available in the experience.