Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

EventId vs Actiontype - Defender for endpoint

Brass Contributor



I started blogpost about the differences between MDI and MDE. so I have an overview of the eventid's for MDI.....But after investigation it seems that MDE does not log eventid's but actiontypes. Can somebody tell me what the differences are?


best regards



0 Replies