Detection rules › By event

Intune-DeviceConfiguration

Event	Rules
Create DeviceManagementConfigurationPolicy	1
Delete DeviceManagementConfigurationPolicy	1

Create DeviceManagementConfigurationPolicy

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune DeviceManagementConfigurationPolicies T1021, T1021.007, T1072, T1484, T1685, T1686

Delete DeviceManagementConfigurationPolicy

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune DeviceManagementConfigurationPolicies T1021, T1021.007, T1072, T1484, T1685, T1686