Capturing “High-Value” Office 365 Audit Events Requires E5 Licenses

%3CLINGO-SUB%20id%3D%22lingo-sub-1212634%22%20slang%3D%22en-US%22%3ECapturing%20%E2%80%9CHigh-Value%E2%80%9D%20Office%20365%20Audit%20Events%20Requires%20E5%20Licenses%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1212634%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMicrosoft%20has%20released%20information%20about%20high-value%20Office%20365%20audit%20events%20and%20audit%20event%20retention%20policies.%20Both%20are%20part%20of%20a%20Microsoft%20365%20Advanced%20Audit%20offering.%20The%20MailItemsAccessed%20event%20is%20the%20first%20high-value%20audit%20event%20(we%20can%20expect%20more)%20and%20the%20retention%20policies%20are%20used%20to%20purge%20unneeded%20events%20from%20the%20Office%20365%20audit%20log.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foffice365itpros.com%2F2020%2F03%2F06%2Fcapturing-high-value-audit-event%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365itpros.com%2F2020%2F03%2F06%2Fcapturing-high-value-audit-event%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1212634%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
MVP

 

Microsoft has released information about high-value Office 365 audit events and audit event retention policies. Both are part of a Microsoft 365 Advanced Audit offering. The MailItemsAccessed event is the first high-value audit event (we can expect more) and the retention policies are used to purge unneeded events from the Office 365 audit log.

 

https://office365itpros.com/2020/03/06/capturing-high-value-audit-event/

0 Replies