Where i can see all the modification by the administrator in the securitycenter.microsoft.com (Defender ATP) ? Someone changed some settings and I don't know who did
Bumping for visibility as also interested in how others handle this. I have previously seen that you can do something like this for device actions by using Azure Log Analytics and Azure Logic App workflow.
