question

JamieHebbs-7301 avatar image
JamieHebbs-7301 asked ·

Use Powershell to export Azure AD Sign-Ins Log

Is there a way to use Powershell to export the Sign-Ins Log, including fields such as Operating System ?

In particular, the fields from the GUI in the attachment.-

8470-capture.jpg

I tried the AzureADPreview module with get-azureadauditsigninlogs but it doesn't bring back OS. There are also lots of GUIDs in the report too.


azure-active-directory
capture.jpg (16.2 KiB)
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
michev answered ·

Use the Graph API endpoint: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http
You can use PowerShell as a wrapper for it, via Invoke-WebRequest/Invoke-RestMethod, and avoid the inherit limitations of the AzureAD module.

1 comment Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks, I'll give it a go

0 Votes 0 · ·