Loading...

The Importance of the Office 365 Audit Log for IT Forensics

The Importance of the Office 365 Audit Log for IT Forensics
Microsoft DART (cybersecurity response team) published an interesting article about the essential sources of Microsoft 365 audit data used for forensic investigations. The Office 365 audit log gets a big mention and DART seems pretty impressed by the new audit log search that's available in preview in the Purview Compliance portal. I'm not impressed by the performance of the new interface and will continue to use PowerShell. As it turns out, so will DART.

Published on:

Learn more
Office 365 for IT Pros
Office 365 for IT Pros

Office 365 for IT Pros is the world's best book about Office 365 architecture, management, and deployment. Written by a team of highly experienced Microsoft MVPs, Office 365 for IT Pros is refreshed monthly.

Share post:

Related posts

Microsoft 365 Admin Center: Admin Audit logs in Purview

Admin activities for managing Microsoft Copilot agents will be logged by default in Microsoft Purview Unified Audit Logs starting late October...

6 hours ago

Microsoft 365 Copilot: New usage intensity metrics available in admin center report

New Microsoft 365 Copilot usage intensity metrics will be available in the admin center report by late October 2025, showing prompt counts, da...

6 hours ago

Microsoft Teams: Microsoft Graph APIs for Teams administration now available in beta

Microsoft Graph beta now offers Teams administration APIs for user configuration, number management, and policy assignment. These enable autom...

6 hours ago

Microsoft 365 Copilot: MCP-based agents now available in Copilot and Microsoft 365 admin center

Microsoft 365 Copilot now supports MCP-based agents, allowing developers to build and admins to manage these agents via the Copilot Agent Stor...

6 hours ago

Manage SharePoint agents in Copilot Control System: View, block, or unblock agents used in Copilot Chat

Microsoft 365 admins can now manage SharePoint agents in Copilot Chat via a new Agents section in the Copilot Control System. They can view, b...

6 hours ago

Viva Engage: Retirement of Viva Engage Desktop Notifications

Microsoft is retiring Viva Engage desktop notifications by mid-November 2025 to streamline notifications across Microsoft 365. Desktop push no...

6 hours ago

Microsoft Copilot (Microsoft 365): Seamless Search and Chat Integration

Microsoft 365 Chat brings the power of conversational AI directly into Microsoft 365 Copilot Search, enabling users to move effortlessly from ...

7 hours ago

Microsoft 365 app: Overview Page in Copilot Notebooks

Users will find Copilot-powered Notebook summaries and insights as a landing page within their Copilot Notebook. Product Release phase General...

7 hours ago

Microsoft 365 Copilot Usage Report API General Availability

The Copilot usage report Graph API is now generally available. Like the report APIs for the other workloads, the Copilot usage API helps to un...

10 hours ago

Microsoft 365 & Power Platform Community Call – October 9th, 2025 – Screenshot Summary

Call Highlights   SharePoint Quicklinks: Primary PnP Website: https://aka.ms/m365pnp Documentation & Guidance SharePoint Dev Videos Issues...

19 hours ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy