You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-for-identity/deploy/configure-windows-event-collection.md
+6-2Lines changed: 6 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: Configure audit policies for Windows event logs | Microsoft Defender for Identity
3
3
description: This article describes how to configure audit policies for Windows event logs as part of deploying a Microsoft Defender for Identity sensor.
4
-
ms.date: 06/04/2025
4
+
ms.date: 11/05/2025
5
5
ms.topic: how-to
6
6
ms.reviewer: rlitinsky
7
7
---
@@ -23,9 +23,13 @@ Defender for Identity generates health issues for each of these scenarios if the
23
23
Before you start creating new event and audit policies, we recommend that you run the following PowerShell command to generate a report of your current domain configurations:
> When using `-Mode Domain`, include the `-Identity` parameter to avoid an interactive prompt.
31
+
> For more information, see: [New-MDIConfigurationReport](/powershell/module/defenderforidentity/new-mdiconfigurationreport?view=defenderforidentity-latest&preserve-view=true).
32
+
29
33
In the preceding command:
30
34
31
35
-`Path` specifies the path to save the reports to.
0 commit comments