Track user and admin activity with Advanced Audit

Microsoft 365
Office 365

Microsoft 365 delivers comprehensive audit logs and alerts across more than 15 services, which enables customers to track user and administration activity within their tenants. Improvements in Advanced Auditing in Microsoft 365 include preservation of audit logs for up to a year, faster access to data, and access to crucial events for quicker investigations.

Learning objectives

Upon completion of this module, you should be able to:

  • Describe the preservation improvements that have been made in advanced auditing.
  • Describe the bandwidth improvements that have been made in auditing.
  • Describe the new MailItemsAccessed mailbox auditing action and how it can help investigators better understand and identify the scope of compromises to specific mail items that may have been compromised.


  • Cloud computing concepts
  • Microsoft 365 product and services