A Gatelet was activated and need to know who did it and when
Login to the CloudSOC tenant as a SysAdmin
Click on "User Name" in the top right corner
Choose History under User Name
Adjust the time window to the desired range
Expand the Filters menu
Filter by the desired item you are looking for
Notes:
Historical activities are only stored for 6 months
SysAdmins can see history for the whole tenant
Admins can only see their own personal history