How do I need to have logging on my DCs configured for the ATP Sensors

%3CLINGO-SUB%20id%3D%22lingo-sub-1578765%22%20slang%3D%22en-US%22%3EHow%20do%20I%20need%20to%20have%20logging%20on%20my%20DCs%20configured%20for%20the%20ATP%20Sensors%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1578765%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%202%20questions%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EDo%20I%20need%20to%20have%20logging%20on%20my%20DCs%20configured%20in%20a%20particular%20way%20for%20deployment%20of%20the%20Azure%20ATP%20sensors%3F%3C%2FLI%3E%3CLI%3EWhat%20logs%20do%20the%20Sensors%20used%20on%20the%20DCs%3F%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERay%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1578858%22%20slang%3D%22en-US%22%3ERe%3A%20How%20do%20I%20need%20to%20have%20logging%20on%20my%20DCs%20configured%20for%20the%20ATP%20Sensors%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1578858%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F754955%22%20target%3D%22_blank%22%3E%40Ray_Vega%3C%2FA%3E%26nbsp%3BSee%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fconfigure-windows-event-collection%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fconfigure-windows-event-collection%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1581336%22%20slang%3D%22en-US%22%3ERe%3A%20How%20do%20I%20need%20to%20have%20logging%20on%20my%20DCs%20configured%20for%20the%20ATP%20Sensors%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1581336%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPerfect%3C%2FP%3E%3CP%3EThank%20You%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi ,

 

I have 2 questions:

 

  1. Do I need to have logging on my DCs configured in a particular way for deployment of the Azure ATP sensors?
  2. What logs do the Sensors used on the DCs?

 

Ray

 

2 Replies