Have you tried creating custom activity reports or alerts with Investigations? What information did you need to get? Did it work for you?

dimav (Dmitry Vorontsov) July 15, 2025, 8:01pm 1

Topic		Replies	Views
What types of changes do you most frequently monitor using the “User Activity” or “Logon Activity” reports—and why are those important for your team? Discussions & Questions auditor , weekly-product-discussion	0	19	July 21, 2025
How do you use the tool to monitor changes or usage patterns that aren't captured by native AD logs? Discussions & Questions threat-prevention , weekly-product-discussion	0	6	July 28, 2025
If you could enhance one aspect of the detection or investigation experience, what would it be? Discussions & Questions threat-manager , weekly-product-discussion	1	14	July 18, 2025
NPS scheduled reports Discussions & Questions privilege-secure , nps	5	129	July 15, 2025
Which types of alerts do you investigate immediately, and which do you tend to defer? Discussions & Questions threat-manager , weekly-product-discussion	0	4	July 21, 2025