FileDeleted Events missing in DeviceFileEvents logs

Brass Contributor

Hello,

 

We are trying to see all deleted file events (FileDeleted) from table DeviceFileEvents Microsoft Defender Logs, but not all events of the deleted files are appear, there are a lot of events are missing.

 

Thanks

1 Reply
I'm working on something that requires this as well. I noticed they are missing too.