What time zone does Defender for Cloud Apps display alerts in?

[1357924680]

I found documentation for Defender for Endpoint stating it displays alerts in UTC by default, but not Defender for Cloud Apps. 

Does anyone know what time zone it displays alerts in? Or if there is a way to change this? 

[#2 · Accepted solution]

Hi,

For MDA alerts, the alert time is localized to the browser (so it should be the same time zone the individual accessing the alert is located in).

[#3]

@Keith_Fleming 

Thanks Keith. Is there a way to change this to UTC? 

[#4]

Hi,

In this case there is not within MDA directly, it will be based on localized time in the browser.

However, this is possible with M365D which also contains MDA alerts. This can be changed in "Settings > Security Center" and then alerts are localized to whatever TZ you specify. You can query them directly in advanced hunting or view them from unified alert queue.

[#5]

@Keith_Fleming 

Gotcha, thanks!