Course details

MS-101 - Microsoft 365 Mobility & Security: Auditing

MS-101 - Microsoft 365 Mobility & Security: Auditing


Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description

In this 14-video course, learners can explore audit logging in Microsoft 365—a feature that records user and admin activity to a log file, and provides helpful information for investigating and troubleshooting incidents within an organization—while preparing for the MS-101: Microsoft 365 Mobility and Security exam. Key concepts covered here include audit log features in Office 365; how to turn on audit log search, perform an audit log search, and view audit log search results; and how to filter and export audit log search results. Next, learn how to describe audited activities; learn how long records are preserved based on the subscription or license; enable mailbox auditing; and use the audit log search tool to locate specific tasks. Then learn how to configure a new alert policy in the Security & Compliance Center and how to monitor the unified audit logs using the Search-UnifiedAuditLog cmdlet. In the concluding exercise, learners will perform an audit log search; filter and export audit log search results; enable mailbox auditing; and use the Search-UnifiedAuditLog cmdlet.



Expected Duration (hours)
1.1

Lesson Objectives

MS-101 - Microsoft 365 Mobility & Security: Auditing

  • identify the subject areas covered in this course
  • describe the audit log in Office 365
  • turn on audit log search
  • perform an audit log search
  • view audit log search results
  • filter audit log search results
  • export audit log search results
  • describe audited activities
  • describe how long records are preserved based on the subscription or license
  • enable mailbox auditing
  • use the audit log search tool to locate specific tasks
  • configure a new alert policy in the Security & Compliance Center
  • demonstrate how to monitor the unified audit logs using the Search-UnifiedAuditLog cmdlet
  • perform an audit log search, filter and export audit log search results, enable mailbox auditing, and use the Search-UnifiedAuditLog cmdlet
  • Course Number:
    it_clo3ms_12_enus

    Expertise Level
    Expert