Microsoft 365 Auditing

When dealing with a cloud environment, auditing user activities is a necessary security practice because users can sign in from practically anywhere. However, by using just the native admin tools, you may be missing some of the crucial details you need to fully audit user activities in Microsoft 365. Use M365 Manager Plus, the Microsoft 365 reporting, auditing, and management component of AD360, our unified IAM solution, to ease your security concerns and keep your Microsoft 365 setup intact. With M365 Manager Plus, audit major Microsoft 365 services such as Exchange Online, Azure Active Directory, SharePoint Online, OneDrive for Business, Microsoft Teams, Sway, and more. You can also granularly audit user activities across Microsoft 365, such as permission changes, logon attempts, file and site access, and more.

Exchange Online Auditing  

You need to constantly audit Exchange Online to keep mailbox issues, like spam and malware, at bay. Use M365 Manager Plus to audit and monitor not only mailbox accesses but public folder accesses, contact changes, and permission changes as well.

With M365 Manager Plus, keep track of:

• Non-owner mailbox accesses, admin activities, and mailbox delegations to check for malicious activities.
• Owner, non-owner, and admin activities on Exchange Online groups, group delegations, emails sent as groups, and more.
• Contacts created, modified, or deleted by users.
• Public folders created, modified, or deleted by users.
• Any changes made to critical mailbox permissions.

Azure Active Directory Auditing  

Auditing user activities in your Microsoft 365 environment helps organizations make preemptive decisions. If your auditing tool reveals suspicious user activities in Azure AD, you can avoid security breaches well before any dire consequences occur. M365 Manager Plus provides in-depth audit details, which keep you aware of every event in the Azure AD environment.

With M365 Manager Plus, keep track of specific events and audit Microsoft 365 user activities like:

• Failed logon attempts due to an invalid username or password, which are indicators of brute force attacks.
• Password and license changes made by users.
• Recently created, modified, or deleted user accounts and user groups.
• Group membership changes.

SharePoint Online Auditing  

SharePoint Online is crucial for the content management and internal communications of organizations. Track the activities of your sites, monitor file sharing across teams, and use custom audit profiles to generate tailored reports for the events you wish to track and receive alerts for, without having to lug through complicated audit logs to monitor activities.

With M365 Manager Plus, keep track of:

• Files and sites created, modified, deleted, renamed, or moved—with details on who did what action and when.
• Synced files and sync activities
• Shared files and sites
• Creation, modification, and deletion of site groups, workflows, size quotas, and permissions.

OneDrive for Business Auditing  

M365 Manager Plus audits OneDrive for Business to bring even the smallest file changes to light. Monitor file activities, file sharing activities, and sync activities, such as files uploaded to or downloaded from the cloud, to keep OneDrive for Business undamaged. Create your own audit profiles to audit only those events you want to track. Audit profiles help you avoid the overhead that comes along with scrutinizing the entire audit log for details.

With M365 Manager Plus, keep track of:

• Files created, modified, deleted, renamed, or moved—with details on who did what action and when.
• Sharing invitations, accepted and rejected access requests, and created, accepted, and deleted file sharing activities.
• Partially and fully downloaded files, as well as uploaded files.
• Synced devices and more

Microsoft Teams auditing  

Microsoft Teams helps get your teams on the same page with group chat, online meetings, web conferencing, etc. Users can customize their workspace by adding their favorite Microsoft app and third-party services. Teams can also collaborate on files with built-in Microsoft 365 apps like Word, Excel, PowerPoint, and SharePoint.

With M365 Manager Plus, you can:

• Track every team, organization, and channel setting changed by users.
• Audit the teams and channels created in your organization to understand team dynamics better.
• See the bots added and removed from your team's environment.
• Configure alerts to notify you about changes you deem critical.

Yammer auditing

Yammer is the enterprise social network that brings all the stakeholders of a company, both internal and external, together. It's all about collaboration and networking. From Yammer, users can schedule a meeting in Outlook, start a video call in Skype for Business, access documents from OneDrive, and so on.

With everything users can access from Yammer, it's essential that actions are tracked. With M365 Manager Plus, you can:

• Audit the user groups created, modified, and deleted in Yammer, including the messages exchanged in those groups.
• Keep track of files accessed, downloaded, modified, and viewed by Yammer users to ensure the integrity of files.
• Track network configuration, profile settings, and security configuration changes made by admin.
• Receive notifications about suspended users, exported data, and other modified Yammer settings the moment any of these activities happen.

Power BI auditing

Power BI is a business analytics suite fit for handling any amount of data. When bestowed with the responsibility of handling company data, extra precaution must be taken to comply with industrial mandates, so you can avoid mishaps. But Power BI's audit logs are difficult to get to and require multiple access features to be enabled in Microsoft 365.

With M365 Manager Plus, you can:

• Keep track of the groups created, modified, and deleted by users on Power BI.
• See what dashboards were created, modified, deleted, and printed by users.
• Audit the reports generated, viewed, printed, and shared by users to ensure that no data is shared with the external network, where it can fall into the wrong hands.
• Know which users viewed metrics, admin portal activities, and datasets.

Microsoft Stream auditing

Microsoft Stream is the video sharing service of Microsoft 365, which lets you create and share videos across your organization. Users can create videos for knowledge sharing or promotion, and share them with their target audience.

With M365 Manager Plus, you can:

• Audit created, shared, modified, downloaded, and deleted videos by users.
• See the likes and comments on videos, including deleted comments, along with permission changes made to videos.
• Track the channels created, modified, and deleted by users in your Stream environment.
• View information on user settings changes, deleted users, admin setting changes, and more.

Compliance Auditing

Compliance auditing is an arduous, but necessary task. M365 Manager Plus helps you generate and maintain the audit details you need to meet compliance requirements such as SOX, PCI-DSS, HIPAA, FISMA, and GLBA.

With M365 Manager Plus, keep track of:

• Security searches and created, modified, or deleted compliance security filters.
• Created, modified, or deleted Data Loss Prevention (DLP) and retention compliance policies.
• New case hold policies, DLP matches, activity alerts, users, and groups.
• Management role groups that are created or deleted, including their members, and more.