Governance log
The governance log in Microsoft Defender for Cloud Apps is a feature that enables administrators to track all administrative activities performed in the Defender for Cloud Apps portal. The governance log records events related to policy configurations, user and group management, and other administrative tasks, providing a detailed audit trail of all the changes made in the portal. This log is an essential component of a comprehensive cloud app security strategy, allowing organizations to monitor and investigate administrative activities in the portal and detect any suspicious or unauthorized activities.
The governance log captures various types of events related to the administration of Defender for Cloud Apps, including the following:
- Policy management: Events related to policy creation, modification, deletion, and assignment, including changes to policy settings and configurations
- User and group management: Events related to user and group creation,...