Reviewing and interpreting alerts, reports, and dashboards
With MDA, you can review information on file activity within your cloud applications by completing the following steps:
- From the Microsoft 365 Defender portal, go to Cloud Apps | Files, as shown in the following screenshot:
Figure 10.36: Investigating files
- Click on an individual file to see information related to it. Additionally, selecting the three dots next to an individual file item will show you the recent file activity in this area for your cloud apps, such as related alerts and governance, and allow you to apply the required response actions:
Figure 10.37: The available file actions
- From the same section of the Microsoft 365 Defender portal, you can also access the Activity log:
Figure 10.38: Activity log
- Use the queries and filters at the top of the activity log to view specific log activity...