ATP Audit Log

%3CLINGO-SUB%20id%3D%22lingo-sub-571422%22%20slang%3D%22en-US%22%3EATP%20Audit%20Log%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-571422%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20couldn't%20find%20any%20activity%20been%20logged%20for%20using%20ATP%20tools%20such%20as%20Explorer.%20I%20tried%20to%20move%20couple%20of%20users%20emails%20to%20Deleted%20Item%20(Threat%20Management%20-%20Explorer%20-%20View%20Malware%20-%20Email%20-%20Actions%20-%20Email%20Message%20-%20Move%20to%20deleted%20item)%202%20days%20ago%2C%20but%20nothing%20has%20been%20returned%20in%20Audit%20log%20search%20yet.%20Just%20wonder%20whether%20this%20kind%20of%20admin%20activity%20in%20ATP%20tools%20are%20audited%3F%20Many%20thanks.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EYang%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-618919%22%20slang%3D%22en-US%22%3ERe%3A%20ATP%20Audit%20Log%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-618919%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F177767%22%20target%3D%22_blank%22%3E%40YU%20Yang%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F90352%22%20target%3D%22_blank%22%3E%40Enrique%20Saggese%3C%2FA%3E%3A%20Is%20this%20something%20you%20can%20help%20with%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi Community,

 

I couldn't find any activity been logged for using ATP tools such as Explorer. I tried to move couple of users emails to Deleted Item (Threat Management - Explorer - View Malware - Email - Actions - Email Message - Move to deleted item) 2 days ago, but nothing has been returned in Audit log search yet. Just wonder whether this kind of admin activity in ATP tools are audited? Many thanks. 

 

Regards,

Yang

1 Reply

@YU Yang 

 

@Enrique Saggese: Is this something you can help with?