Explore security events
Security events in Microsoft Security Exposure Management track initiative and metric score drop incidents in order to determine how they affect organizational security posture.
Prerequisites
Learn about security events.
- Review permissions and prerequisites needed for working with Security Exposure Management.
Review security events
In the Microsoft Defender portal, select Exposure management -> Exposure insights -> Events to open the Events page.
Select the time range you need in the calendar drop-down.
To filter by initiative score drop events or metric score drop events, select filter or the score drop event quantity.
Select a specific event to open it in Initiatives or Metrics.