Audit for Message Trace and Exchange managment shell commands

[EmyLoanzon]

Is there a way to run audits on which admin users ran message trace and Exchange online power shell commands (and what commands those are)?

Thank you.

[#2 · Accepted solution]

Message trace is not audited, neither are any of the Get-* cmdlets. All the others are audited and you can view them in the Unified audit log or the Exchange Admin Center: https://docs.microsoft.com/en-us/exchange/security-and-compliance/exchange-auditing-reports/view-adm...