Jul 06 2023
Does anyone know when they will introduce MDE Audit Logs?
I've checked the message centre however not appearing...
Also not listed in the Microsoft Documentation which breaks down auditing.
Jul 09 2023
@RioHindle It is possible to use Power Automate to collect some more information using the 'Microsoft Defender ARP API' to send emails on certain alerts. An then of course if integrated with Sentinel. You can review the logs in more depth.Microsoft Defender for Endpoint Automation with Power Automate | Microsoft Information Protection