Home

Office 365 ATP Tools Audit Log

%3CLINGO-SUB%20id%3D%22lingo-sub-574418%22%20slang%3D%22en-US%22%3EOffice%20365%20ATP%20Tools%20Audit%20Log%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-574418%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20couldn't%20find%20any%20activity%20been%20logged%20for%20using%20ATP%20tools%20such%20as%20Explorer.%20I%20tried%20to%20move%20couple%20of%20users%20emails%20to%20Deleted%20Item%20(Threat%20Management%20-%20Explorer%20-%20View%20Malware%20-%20Email%20-%20Actions%20-%20Email%20Message%20-%20Move%20to%20deleted%20item)%202%20days%20ago%2C%20but%20nothing%20has%20been%20returned%20in%20Audit%20log%20search%20yet.%20Just%20wonder%20whether%20this%20kind%20of%20admin%20activity%20in%20ATP%20tools%20are%20audited%3F%20Many%20thanks.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EYang%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-574418%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
YU Yang
Occasional Contributor

Hi Community,

 

I couldn't find any activity been logged for using ATP tools such as Explorer. I tried to move couple of users emails to Deleted Item (Threat Management - Explorer - View Malware - Email - Actions - Email Message - Move to deleted item) 2 days ago, but nothing has been returned in Audit log search yet. Just wonder whether this kind of admin activity in ATP tools are audited? Many thanks. 

 

Regards,

Yang

Related Conversations
Dont see any Contact in Teams
nicb in Microsoft Teams on
2 Replies
OUTLOOK JUNK FOLDER DUPLICATION BUG
Phil Gibbs in Office 365 on
1 Replies
ATP Safelinks
Patrick Genova in Office 365 on
8 Replies