Is there a way to use Powershell to export the Sign-Ins Log, including fields such as Operating System ?
In particular, the fields from the GUI in the attachment.-
I tried the AzureADPreview module with get-azureadauditsigninlogs but it doesn't bring back OS. There are also lots of GUIDs in the report too.
Use the Graph API endpoint: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http
You can use PowerShell as a wrapper for it, via Invoke-WebRequest/Invoke-RestMethod, and avoid the inherit limitations of the AzureAD module.
21 People are following this question.
