Configure Scope

The Scope section allows you to select the historic period that needs to be audited. The historic period allows you to scan all the files which were either created or modified during the selected period. The time period can stretch to a maximum of 6 months.

Once you select the time period, you must select the Microsoft Tenant (if you have configured multiple tenants), drives within the tenant, and folder types to be audited. You can learn about these configurations from the Nightfall for Microsoft OneDrive Scope configuration document, for Data detection and response.