Announcing enhanced audit and upload notifications for Exact Data Match (EDM)
We’re releasing a set of updates for Exact Data Match (EDM) that will give you better visibility over EDM events and enable you to receive notifications on EDM data upload status.
When this will happen
Rollout will begin in early March and is expected to be complete by end of March 2021.
How this will affect your organization
Admins can now search the Microsoft 365 audit log for events related to Exact Data Match (EDM) schema and rule package updates, as well as EDM data uploads, to understand who modified, deleted, or created each EDM component and when.
Admins will also be able to configure protection alert policies for EDM Upload Agent notifications, enabling them to receive alerts both via email and in the alerts dashboard for data upload audit events, such as when a data upload has successfully completed.
What you need to do to prepare
To receive upload event notifications, you will need to create a protection alert policy through a PowerShell cmdlet.
Using the Microsoft 365 compliance center UI or the same PowerShell cmdlet, you can set a threshold for when an alert is triggered and decide whether to receive email notifications for triggered alerts.
Review the following resources for instructions on connecting to the SCC PowerShell and general information on alert policies:
- Alert policies in the security and compliance center
- Connect to Security & Compliance Center PowerShell using the EXO V2 module
- New-ProtectionAlert (Exchange PowerShell)
Message ID: MC243212