• Online, Self-Paced
Course Description

In this 14-video course, learners can explore audit logging in Microsoft 365'a feature that records user and admin activity to a log file, and provides helpful information for investigating and troubleshooting incidents within an organization, while preparing for the MS-101: Microsoft 365 Mobility and Security exam. Key concepts covered here include audit log features in Office 365; how to turn on audit log search, perform an audit log search, and view audit log search results; and how to filter and export audit log search results. Next, learn how to describe audited activities; learn how long records are preserved based on the subscription or license; enable mailbox auditing; and use the audit log search tool to locate specific tasks. Then learn how to configure a new alert policy in the Security & Compliance Center and how to monitor the unified audit logs using the Search-UnifiedAuditLog cmdlet. In the concluding exercise, learners will perform an audit log search; filter and export audit log search results; enable mailbox auditing; and use the Search-UnifiedAuditLog cmdlet.

Learning Objectives

{"identify the subject areas covered in this course"}

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.