deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-18 03:43:39 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

update machine timeline with filter

Browse Source
This commit is contained in:
Joey Caparas
2017-05-09 15:52:51 -07:00
parent 845c30935e
commit 1831b97991
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/threat-protection/windows-defender-atp/images/atp-machine-timeline-filter.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 111 KiB

5
windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md
View File

@ -106,6 +106,11 @@ Use the search bar to look for specific alerts or files associated with the mach
- Network
- Local service
The following example illustrates the use of type:value pair. The events were filtered by searching for the user jonathan.wolcott and network events as the event type:
![Image of events filtered by user and event type](images/atp-machine-timeline-filter.png)
The results in the timeline only show network communication events run in the defined user context.
### Filter events from a specific date
Use the time-based slider to filter events from a specific date. By default, the machine timeline is set to display the events of the current day.