Microsoft Purview is expanding access to wider cloud security activity events for Microsoft Exchange and SharePoint. As part of the changes, standard users of Purview Audit will begin to generate 4 new Microsoft Exchange and SharePoint events that were previously generated only for Audit Premium licensed users. The following events will now be provided for all Audit Standard users:
1. MailItemsAccessed;
2. Send;
3. SearchQueryInitiatedExchange;
4. SearchQueryInitiatedSharepoint; The following logs will differ based upon the user’s license.
This following additional metadata is added to Exchange logs when the user is assigned an Audit Premium license: Premium Insight 1: SensitivityLabel for MailItemsAccessed

(more…)
Originally posted by Microsoft
Oct 19, 2023
Uncategorized
0 Comments