I did an Audit Log Search for a Page Viewed event in the Security and Compliance Center and exported the file. I got records for many users that showed they viewed the ActivityFeed.aspx page in their OneDrive site. I am quite confident that many of these users did not actually visit their OneDrive site, in fact they don't even have SPO licenses assigned.
Does anyone know why these activities would be showing up in the audit log? Is there some timer job that is running in the context of a user account?
