Forum Discussion

Dean_Gross's avatar
Dean_Gross
Silver Contributor
Nov 13, 2019

Adding Activity types from O365

Is there any way to add more O365 Apps and/or activity types? There are many types of O365 Admin events that are not available in the Activity Log in MCAS. I am specifically thinking of activities in the Security Center and Compliance Center. Being able to monitor administrative changes in those centers would be helpful.

Cloud App Security

2 Replies

  • Yoann_David_Mallet's avatar
    Yoann_David_Mallet
    Icon for Microsoft rankMicrosoft
    Dec 23, 2019

    Hi Dean,

     

    would you be able to share more on what exact activities you are looking for?

    As of now, you can filter admin activities using the "Activity Admin" filter. 

    Hope this helps.

    • Dean_Gross's avatar
      Dean_Gross
      Silver Contributor
      Dec 28, 2019
      Changes to Labels (Sensitivity and Retention), changes to Policies, changes to Permissions in both centers, basically any item that could be configured as part of an organizations baselined security or compliance policy should be monitored and changes to it eligible for generating an alert

Resources