Many of you have been asking for this session and it's here! Office 365 provides a centralized audit logging facility that allows you to track what’s happening in Azure Active Directory, Exchange Online, SharePoint Online and OneDrive for Business. This new auditing feature is different than auditing logging within on-premise versions of SharePoint and Exchange. However, in the case of Exchange, there is some shared functionality and commands.
In this real training for free ™ webinar, I will introduce you to Office 365 Unified Audit Logging. I'll show you:
- What administrative actions you can audit
- What user level actions you can audit
- What other events are captured such as suspicious logons
- How to enable auditing
- How to access the audit logs
Office 365 offers a web portal where you can search audit events online. There are some limited PowerShell commands for downloading portions of the log.
But how do you extract and move audit logs out of the system where they are generated into a secure log archive where they can be correlated with all the other security data from your organization?
That's where the Office 365 Management Activity API comes in. Alongside Bruce Deakyne, technical product manager at LogRhythm, we will briefly demonstrate how LogRhythm interfaces with the API to get Office 365 events where they belong—in your SIEM. We’ll also show you how LogRhythm’s Security Intelligence and Analytics Platform helps you correlate events across your IT environment and produce actionable insights.
This will be real training for free ™ on an important topic and area of big concern for organizations already in the cloud or contemplating it. Please join us and register now.