Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Service installation alerts

Copper Contributor

Hi all,

Can Defender for endpoint create an alert when a new service is installed?

1 Reply
Yes. The DeviceEvents table includes the ServiceInstalled action type