Feb 01 2024 07:34 PM - edited Feb 01 2024 07:54 PM
Or will it be possible sometime in the future?? We sometimes have to do this for legal purposes, and I was just curious if it's possible now or may be sometime in the future. I am aware of some of the things you can do over Live Response as well as collecting an investigation package from a device, but was curious if a full image capture was possible? And perhaps even sending that data to an Azure Storage Account? Perhaps wishful thinking...
Perhaps this question is better suited for Purview...?
Feb 26 2024 02:39 AM
@musekmkr not quite what you are looking for, but the Purview insider risk management forensics feature could be useful
Feb 26 2024 05:05 AM