Report: Risk Detections - Export Detailed Results as CSV?

Michael Abdo (LCL-C) 1 Reputation point
2021-10-29T00:20:45.743+00:00

Hello Team,

When exporting to CSV, even when selecting all columns, I am unable to include "Detailed" information.

I want to be able to include the data which appears when selecting the entry by Detection Time, which opens the details in a panel on the right.

How can I do this? JSON format is fine too.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,203 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. VipulSparsh-MSFT 16,236 Reputation points Microsoft Employee
    2021-10-29T08:34:58.4+00:00

    @Michael Abdo (LCL-C) Thanks for reaching out. I dont have the logs coming in Risk Detection section in Azure AD. So I will use your data to see how we can get you that detailed information.

    From what I understood from your query, you want to get this RiskDetail field in the CSV that you download :

    144829-image.png

    Can you confirm if you do not see this Risk Detail in your CSV at all ? Many a times the value is present under some other column name due to some reason. So check for that as well. If you can't find it, we can take this offline to further investigate as well.

    For that you can drop me an email at azcommunity@microsoft.com with subject "Atten-Vipul" and I will get in touch with you.

    -----------------------------------------------------------------------------------------------------------------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments