New High-Value Audit Records Capture Details of Microsoft Teams Meetings

 

New audit events are available to capture information about Teams meetings and participants, but only if you have Office 365 E5 or above licenses. That’s because Microsoft deems these events to be high-value audit information prized by forensic investigators when they try to unravel what happened in an incident. You’ll have to make your own mind up how valuable the events are, but we’ve written some PowerShell to make the data more accessible.

https://office365itpros.com/2021/12/09/audit-events-teams-meetings/