Enable defender alerts for disabling bitlocker?

[Microsoft Windows]

I have been trying to get this alert configured for any time bitlocker is disabled on a device in our environment, but when I try to find anything related to bitlocker in Advanced Hunting, I don't get all the devices where it is enabled. I even tested the device timeline and found a bunch of powershell activations, but nothing specifically points to bitlocker. There is no name in the log showing bitlocker. If anyone can assist that would be much appreciated.

Continue reading...