This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.
Hello,
Is there any way to keep a track of who is closing/supress ATA events ?
Thanks !
-Tony
See if this helps:
https://docs.microsoft.com/en-us/advanced-threat-analytics/troubleshoot-audit