They can up to a certain point. MSFT Defender logs has some info with regards what has been deleted, but some other information are missing (such as command lin

They can up to a certain point. MSFT Defender logs has some info with regards what has been deleted, but some other information are missing (such as command line parameters associated with the lnk file)