You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/enable-troubleshooting-mode.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -52,7 +52,7 @@ Defender for Endpoint collects logs and investigation data throughout the troubl
52
52
- A snapshot of `MpPreference` is taken before troubleshooting mode begins.
53
53
- A second snapshot is taken just before troubleshooting mode expires.
54
54
- Operational logs from during troubleshooting mode are also collected.
55
-
- Logs and snapshots are collected and are available for an admin to collect using the [Collect investigation package](respond-machine-alerts.md#collect-investigation-package-from-devices) feature on the device page. Microsoft doesn't remove this data from the device until an admin has collected it.
55
+
- Logs and snapshots are collected and are available for an administrator to collect using the [Collect investigation package](respond-machine-alerts.md#collect-investigation-package-from-devices) feature on the device page. Microsoft doesn't remove this data from the device until an administrator has collected it.
56
56
57
57
Administrators can also review the changes in settings that take place during troubleshooting mode in **Event Viewer** on the device itself.
0 commit comments