Audit email deletion report – Exports who deleted which mail and when.Mail traffic report – Shows the number of emails sent and received by users for a day.Non-owner mailbox access report – Helps to track who accessed another users’ mailbox and when.Teams meeting attendance report – Exports all the team meetings and the participant’s lists to a CSV file.Audit External user activities report – Helps to inspect external users’ activities to prevent security threats & data leakage.User activity report – Lists all the activities performed by a specific user or admin to track any suspicious activity.

Office 365 users l og o n history r e port – Helps to monitor Office 365 users’ login activities and identify unusual login patterns.You must convert them to proceed further.īy considering these challenges, we have created the 15 most required scripts for Office 365 admins to monitor their organization. If it exceeds the limit, you can’t retrieve all records. Even if you use ‘ SessionId’, you can get 50,000 records for a given period.If the specific time range has more than 5000 data, you need to call Search – UnifiedAuditLog again and again with ‘ SessionId’ until you get all records. It can be achieved by using the ‘ ResultSize’ parameter. You can get a maximum of 5000 audit records for each Search-UnifiedAuditLog call.If you are a newbie, it will be hard to get the required result. The cmdlet will list a plethora of results.The ‘ Search-UnifiedAuditLog ’ cmdlet is used to retrieve audit logs, but you may face a few challenges while using it. If you are one of them, this blog will lend a hand to monitor your Office 365 environment efficiently using PowerShell. Most admins prefer PowerShell over Audit log search due to its speed and customization. Office 365 audit reports will be helpful to identify security events, monitor user activities, track file sharing, investigate forensic events, etc. Auditing plays a vital role in monitoring activities performed in the Microsoft 365 organization.

Activity audit report