Creating alerts for specific activities performed by users in OneDrive
Creating alerts for specific actions in OneDrive, such as external file sharing, helps prevent data loss and ensures compliance by notifying administrators of important activities. This recipe details the process of setting up alert policies in the Microsoft 365 Defender portal to monitor and respond to specific user activities.
Getting ready
You must be a Global Administrator to complete this recipe.
How to do it…
- Go to the Microsoft 365 Defender portal at https://security.microsoft.com.
- Select Email & collaboration | Policies & rules from the left navigation menu, then Alert policy, as shown in Figure 14.2.
Figure 14.2 – Location of Alert policy in Microsoft Defender
- Select New Alert Policy.
- Fill in the Name, Description, Severity, and Category fields for the alert, as shown in the example in Figure 14.3.
...
