Sep 22 2022 12:46 AM
I need to know when someone accesses the Timeline tab of a device in the Microsoft 365 Defender portal (security.microsoft.com -> Devices -> Timeline tab).
There's a screenshot here better describing the event we need in the audit log
Are there any way to achieve that today? If not, can this please be treated as a feature request?
More information here: https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-365-defender-feature-request-audit-...
Sep 22 2022 04:43 AM
@lribeiro-sbp - Currently this feature is unavailable. Please try providing the feedback via the Microsoft 365 Defender Portal.