The core audit capabilities of Microsoft 365
Previously in this chapter, we described solutions for governing our communication and content within Microsoft 365 services to prevent, detect, and correct activity that could cause harm to our company. This can be through inappropriate communication, malicious theft of company information, and legal actions that have been taken against the company.
These solutions performed searches and audits of user activity through the policies and cases that were created. There are times when you may want to understand the activity that is taking place without it being a part of a legal case or a detected malicious user. You may just want to review activities taking place on the tenant. You can do this with the core and advanced audit activities that are available within Microsoft 365. These capabilities are divided into core and advanced audits.
The core audit has the following features:
- Companies can view user and administrator activity...
