'Microsoft Defender (Advanced Hunting) : Detecting File copying
I am trying to find if a user has copied some files from the shared folder to the local desktop. The Microsoft Defender (Advanced Hunting) only shows FileDeleted, FileCreated, FileRenamed, and Filemodified. What are other filters I should apply to see if the file has been copied from the shared folder?
Thank you!
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|