Device activity events from Microsoft Sentinel's device entity pages are now visible

January 2025 Update 3

(Preview) Device activity events from Microsoft Sentinel's device entity pages are now visible in the Timeline tab on the Device entity page in the Defender portal, in addition to remaining visible on the Sentinel events tab.

These device activity events now include blocked, dropped, or denied network traffic originating from a given device.