microsoft-365-auditing-and-reporting.md

• Enable Audit Log Search
• Enable Mailbox Auditing for All Users
• Review Role Changes Weekly
• Review Mailbox Forwarding Rules Weekly
• Review the Mailbox Access by Non-Owners Report Bi-Weekly
• Review the Malware Detections Report Weekly
• Review your Account Provisioning Activity Report Weekly
• Additional Resources

Enable Audit Log Search

Enable Mailbox Auditing for All Users

Review Role Changes Weekly

Review Mailbox Forwarding Rules Weekly

Review the Mailbox Access by Non-Owners Report Bi-Weekly

Review the Malware Detections Report Weekly

Review your Account Provisioning Activity Report Weekly

Additional Resources

• https://usc.pax8.com/resource/display/33588
• https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults