Announcing enhanced audit and upload notifications for Exact Data Match (EDM)

Originally posted by Microsoft Mar 6, 2021 Microsoft 365 suite 0 Comments

We’re releasing a set of updates for Exact Data Match (EDM) that will give you better visibility over EDM events and enable you to receive notifications on EDM data upload status.

This message is associated with Microsoft 365 Roadmap IDs 68876 and 68882. 

When this will happen

Rollout will begin in early March and is expected to be complete by end of March 2021.

How this will affect your organization

Admins can now search the Microsoft 365 audit log for events related to Exact Data Match (EDM) schema and rule package updates, as well as EDM data uploads, to understand who modified, deleted, or created each EDM component and when. 

Admins will also be able to configure protection alert policies for EDM Upload Agent notifications, enabling them to receive alerts both via email and in the alerts dashboard for data upload audit events, such as when a data upload has successfully completed.

What you need to do to prepare

To receive upload event notifications, you will need to create a protection alert policy through a PowerShell cmdlet.

Using the Microsoft 365 compliance center UI or the same PowerShell cmdlet, you can set a threshold for when an alert is triggered and decide whether to receive email notifications for triggered alerts. 

Review the following resources for instructions on connecting to the SCC PowerShell and general information on alert policies:

• Alert policies in the security and compliance center
• Connect to Security & Compliance Center PowerShell using the EXO V2 module
• New-ProtectionAlert (Exchange PowerShell)

Message ID: MC243212