Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Audit Logs for O365 Policy Changes

Copper Contributor

Hello Everyone, Am trying to find changes made in safelink policies, safe attachment policies and other settings under Policies & rules ->  Threat policies

 

But unable to find the logs. Do i need to enable some settings to get it ? If you know where i can find it, can you share the details please ?

4 Replies
You can search the Unified audit log for them: https://learn.microsoft.com/en-us/purview/audit-new-search
If you want to narrow down on specific events, use the corresponding cmdlet as filter. I.e. for changes on safe links, search for Set-SafeLinksRule/Set-SafeLinksPolicy as "operation".
thanks - where exactly i can put the operation ? am playing around Unified audit log, but finding hard for me to get the logs i required
In the Activities - Operation names field.
tried with New-TenantAllowBlockListItems but didnt worked