Explore security events

Security events in Microsoft Security Exposure Management track initiative and metric score drop incidents in order to determine how they affect organizational security posture.

Security Exposure Management is currently in public preview.

Important

Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.

Prerequisites

Learn about security events.

• Review permissions and prerequisites needed for working with Security Exposure Management.

Review security events

1. In the Microsoft Defender portal, select Exposure management -> Exposure insights -> Events to open the Events page.

2. Select the time range you need in the calendar drop-down.

3. To filter by initiative score drop events or metric score drop events, select filter or the score drop event quantity.

4. Select a specific event to open it in Initiatives or Metrics.

Next steps

• Work with security initiatives
• Work with security metrics