Office 365 Security Owner todayJuly 29, 2019 40 1
Security alerts from Office 365 Cloud App Security now getting transferred into the Office 365 Audit Log. This is a clear indication that you can run the Search-UnifiedAuditLog to find the alerts. However, this is not all that you need to do. You have to check the alert records. It’s worth to mention here that some of the alerts that shift into the audit log duplicate center already logged by a workload; this is definitely the case for the eDiscovery searches mentioned above.
Written by: Owner