Chapter 15: Security Analytics and Auditing Capabilities
When you consider the importance of security, compliance, and best practice configuration in your Microsoft 365 environment, the configuration of your Microsoft 365 services is only as effective as the analytical, auditing, and reporting capabilities that are available to Microsoft 365 administrators. When you configure, review, and take any required actions by using these capabilities, you can gain vital intelligence on the activities within your environment.
In this chapter, we will introduce you to the concepts of analytics and intelligence within Microsoft 365. You will learn about desktop analytics, the configuration of Windows diagnostic data, and Telemetry in Microsoft Office.
We will also examine some additional features on the subject of auditing and discuss how you can enable auditing, search audit logs, view audit search results, and create and use alert policies to trigger alerts against specific activities...
