Specifying Security and Compliance Alert Policies for Teams
As a Microsoft Teams Administrator, you will need to regularly monitor your environment to ensure that user activities are in line with the policies and settings that you have put in place. To do this, you can create alert policies from Microsoft Defender. Microsoft Defender’s alerts will help you know when users may be engaging in risky or regulated activities such as sharing files externally or uploading files containing sensitive information to third-party services. This enables you to respond in a timely manner to mitigate risk and educate users on responsible usage of Microsoft 365 and the data in your environment.
This section will cover two topics: alert policies and activity alerts.
Alert Policies in Microsoft Defender
Alert policies allow you to create alerts whenever general user activities take place. However, these tend to be a bit more general and not as Teams-specific as the granularity provided...