You have a Microsoft Exchange Online tenant that uses Microsoft Defender for Office 365. You have the policies shown in the following table.
You need to track any modifications made to Policy! by the identifying following:
• The name of the user that modified the policy
• The old and new values of settings modified in Policy!
• How the modifications compare to the baseline settings of Standard Preset Security Policy
What should you use in the Microsoft 365 Defender portal?

Question

You have a Microsoft Exchange Online tenant that uses Microsoft Defender for Office 365. You have the policies shown in the following table.

You need to track any modifications made to Policy! by the identifying following:

• The name of the user that modified the policy

• The old and new values of settings modified in Policy!

• How the modifications compare to the baseline settings of Standard Preset Security Policy

What should you use in the Microsoft 365 Defender portal?

John Shelby · Accepted Answer

Configuration analyzer

John Shelby · Answer

Threat tracker

John Shelby · Answer

Threat analytics

John Shelby · Answer

<div style="font-size:12pt;font-family:Calibri, sans-serif;"><p style="margin:0;"> Audit</p></div>

List of questions