Logging and monitoring

Missing Alert for Delete Security Solution

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Monitoring for Delete Security Solution events gives insight into changes to the active security solutions and may reduce the time it takes to detect suspicious activity.
  • Recommended Mitigation

    Under Monitor -> Alerts, create An Alert for 'Microsoft.Security/securitySolutions/delete'