Have you tried creating custom activity reports or alerts with Investigations? What information did you need to get? Did it work for you?

dimav (Dmitry Vorontsov) July 15, 2025, 8:01pm 1

Topic		Replies	Views
What’s your biggest challenge when reviewing alert context or running queries in an investigation? Discussions & Questions threat-manager , weekly-product-discussion	0	2	August 4, 2025
What types of changes do you most frequently monitor using the “User Activity” or “Logon Activity” reports—and why are those important for your team? Discussions & Questions auditor , weekly-product-discussion	0	24	July 21, 2025
How do you use the tool to monitor changes or usage patterns that aren't captured by native AD logs? Discussions & Questions threat-prevention , weekly-product-discussion	0	11	July 28, 2025
If you could enhance one aspect of the detection or investigation experience, what would it be? Discussions & Questions threat-manager , weekly-product-discussion	1	14	July 18, 2025
What’s your preferred method of navigating the data—search, dashboards, subscriptions, or scheduled exports—and how does it support your day-to-day work? Discussions & Questions auditor , weekly-product-discussion	0	8	August 4, 2025