EventId vs Actiontype - Defender for endpoint

Brass Contributor



I started blogpost about the differences between MDI and MDE. so I have an overview of the eventid's for MDI.....But after investigation it seems that MDE does not log eventid's but actiontypes. Can somebody tell me what the differences are?


best regards



0 Replies