Microsoft 365 Defender audit event whenever someone accesses the Timeline of a device

Copper Contributor

I need to know when someone accesses the Timeline tab of a device in the Microsoft 365 Defender portal (security.microsoft.com -> Devices -> Timeline tab).

There's a screenshot here better describing the event we need in the audit log

Are there any way to achieve that today? If not, can this please be treated as a feature request?

More information here: https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-365-defender-feature-request-audit-... 

1 Reply

@lribeiro-sbp - Currently this feature is unavailable. Please try providing the feedback via the Microsoft 365 Defender Portal.

 

AnuragSrivastava_1-1663846936867.png

 

 

AnuragSrivastava_0-1663846808060.png