In this 14-video course, learners can explore audit logging in Microsoft 365—a feature that records user and admin activity to a log file, and provides helpful information for investigating and troubleshooting incidents within an organization—while preparing for the MS-101: Microsoft 365 Mobility and Security exam. Key concepts covered here include audit log features in Office 365; how to turn on audit log search, perform an audit log search, and view audit log search results; and how to filter and export audit log search results. Next, learn how to describe audited activities; learn how long records are preserved based on the subscription or license; enable mailbox auditing; and use the audit log search tool to locate specific tasks. Then learn how to configure a new alert policy in the Security & Compliance Center and how to monitor the unified audit logs using the Search-UnifiedAuditLog cmdlet. In the concluding exercise, learners will perform an audit log search; filter and export audit log search results; enable mailbox auditing; and use the Search-UnifiedAuditLog cmdlet.
MS-101 - Microsoft 365 Mobility & Security: Auditing