Originally posted by Microsoft
Oct 19, 2023
Uncategorized
0 Comments
Microsoft Purview is expanding access to wider cloud security activity events for Microsoft Exchange and SharePoint. As part of the changes, standard users of Purview Audit will begin to generate 4 new Microsoft Exchange and SharePoint events that were previously generated only for Audit Premium licensed users. The following events will now be provided for all Audit Standard users:
1. MailItemsAccessed;
2. Send;
3. SearchQueryInitiatedExchange;
4. SearchQueryInitiatedSharepoint; The following logs will differ based upon the user’s license.
This following additional metadata is added to Exchange logs when the user is assigned an Audit Premium license: Premium Insight 1: SensitivityLabel for MailItemsAccessed

(more…)