Forum Discussion
Query UpdateInboxRules or New-InboxRule from within Log Analytics
Hi Community I looking for an easier way to discover creation of forward rules in Exchange. Currently i have to manually go through each alert (Office 365 Security & Compliance) where the alerts ...
Havent bothered with Log analytics, but you can easily fetch the audit events from PowerShell and parse the extended information there. Or if you want to work directly with the alerts, use the Management Activity API's: https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference