This is the first time I have to investigate a security incident by Defender ATP portal.
Nice insight BUT I see when I want to check for particular time frame this is in UTC.
At this moment I see my message: Your content was last auto-saved at 09:08 AM but now in Amsterdam it is 18:08
What I see normally, I can adjust my profile to timezone. The data I see is also reallity the time I need to explore.
1) Where can I switch this portal to local time to be able to search for the correct data.
2) If this is not possible the data collected @ Laptop, what is the timeframe I should select to see the data from device between 08:00 CET and 09:00 CET ?
You can switch to local timezone in the Localization setting:
You can find more info here: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/portal-ov...