How to see all the Logs of items that would have been blocked like ASR Reporting via Advanced Hunting Query
DeviceEvents |where ActionType in ('ExploitGuardNetworkProtectionAudited','ExploitGuardNetworkProtectionBlocked')
How to see all the Logs of items that would have been blocked like ASR Reporting via Advanced Hunting Query
DeviceEvents |where ActionType in ('ExploitGuardNetworkProtectionAudited','ExploitGuardNetworkProtectionBlocked')