Office 365 ATP Tools Audit Log

%3CLINGO-SUB%20id%3D%22lingo-sub-574418%22%20slang%3D%22en-US%22%3EOffice%20365%20ATP%20Tools%20Audit%20Log%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-574418%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20couldn't%20find%20any%20activity%20been%20logged%20for%20using%20ATP%20tools%20such%20as%20Explorer.%20I%20tried%20to%20move%20couple%20of%20users%20emails%20to%20Deleted%20Item%20(Threat%20Management%20-%20Explorer%20-%20View%20Malware%20-%20Email%20-%20Actions%20-%20Email%20Message%20-%20Move%20to%20deleted%20item)%202%20days%20ago%2C%20but%20nothing%20has%20been%20returned%20in%20Audit%20log%20search%20yet.%20Just%20wonder%20whether%20this%20kind%20of%20admin%20activity%20in%20ATP%20tools%20are%20audited%3F%20Many%20thanks.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EYang%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-574418%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

Hi Community,

 

I couldn't find any activity been logged for using ATP tools such as Explorer. I tried to move couple of users emails to Deleted Item (Threat Management - Explorer - View Malware - Email - Actions - Email Message - Move to deleted item) 2 days ago, but nothing has been returned in Audit log search yet. Just wonder whether this kind of admin activity in ATP tools are audited? Many thanks. 

 

Regards,

Yang

0 Replies