Microsoft 365 Defender audit event whenever someone accesses the Timeline of a device

Copper Contributor

I need to know when someone accesses the Timeline tab of a device in the Microsoft 365 Defender portal ( -> Devices -> Timeline tab).

There's a screenshot here better describing the event we need in the audit log

Are there any way to achieve that today? If not, can this please be treated as a feature request?

More information here: 

1 Reply

@lribeiro-sbp - Currently this feature is unavailable. Please try providing the feedback via the Microsoft 365 Defender Portal.