...
More telemetry for process creations and incidents
User SID
User down-level logon name
Whether or not the process is elevated (Run As Administrator)
Incident Incidents now report where iterative data access occurred
...
Page Comparison
General
Content
Integrations