DefenderATP Audit logs

Occasional Contributor

Hi all,


Where i can see all the modification by the administrator in the (Defender ATP) ? Someone changed some settings and I don't know who did

2 Replies
Bumping for visibility as also interested in how others handle this. I have previously seen that you can do something like this for device actions by using Azure Log Analytics and Azure Logic App workflow.

@Ru bump