Microsoft Purview compliance portal: Audit – New Exchange and SharePoint Logs for Microsoft Purview Audit Standard Users

Originally posted by Microsoft Oct 19, 2023 Uncategorized 0 Comments

Microsoft Purview is expanding access to wider cloud security activity events for Microsoft Exchange and SharePoint. As part of the changes, standard users of Purview Audit will begin to generate 4 new Microsoft Exchange and SharePoint events that were previously generated only for Audit Premium licensed users. The following events will now be provided for all Audit Standard users:

1. MailItemsAccessed;
2. Send;
3. SearchQueryInitiatedExchange;
4. SearchQueryInitiatedSharepoint; The following logs will differ based upon the user’s license.

This following additional metadata is added to Exchange logs when the user is assigned an Audit Premium license: Premium Insight 1: SensitivityLabel for MailItemsAccessed

Product
Release phase	Preview
Release date	September CY2024
Platform	Web
Cloud Instance	GCC, Worldwide (Standard Multi-Tenant), GCC High, DoD
Created	2023-10-18
Roadmap ID	182259
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=182259