How to create your Defender ATP Admin Audit Log Dashboard

Sat, 11 Apr 2020 20:11:07 +0000

Hello everyone,

In today’s blogpost I will walk you through the process of creating an admin audit log dashboard for Defender Advanced Threat Protection. During my past customer engagements, I was often asked if there is a way to show device actions taken by Defender ATP admins. The answer is yes, this is possible. First the information is available through the Defender ATP API, second the information is also stored within the Windows event log of the device itself.

Azure-Logic-App on Anything About IT

How to create your Defender ATP Admin Audit Log Dashboard