OWA connection logs

[DiVojich]

Hi all,

we have a user with a compromised email address.

Is there any way I can get "connection logs" for this user?

User was using OWA.

Kind regards,

[#2 · Accepted solution]

Hi!

See here

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/responding-to-a-compromi...

Check the audit log in the 365 security and compliance centre and sign in logs in Azure AD

Hope that answers your question

Best, Chris