Monitoring and Analyzing Audit Logs and Reports in Microsoft Purview
When you consider the importance of security, compliance, and best practice configuration in your Microsoft 365 environment, the configuration of your Microsoft 365 services is only as effective as the analytical, auditing, and reporting capabilities that are available to (and diligently used by) Microsoft 365 administrators. When you configure, review, and take any required actions by using these capabilities, you can gain vital intelligence on the activities within your environment.
In this chapter, we will be introduced to the principles and capabilities of analysis and reporting within Microsoft Purview. We will learn how to plan our auditing and reporting strategy as well as how to use audit logs to carry out investigations into compliance-related activities. We will also review the available compliance reports and dashboards and consider how we might configure alert policies and auditing retention policies...
