Office 365 and Azure AD Security Events to Monitor During the COVID-19 Crisis

E-book

Published July 2020

Top10Quest

Is your organization really more secure now that you’re running applications in the cloud? More efficient, probably. But more secure?

Users can still perform high-risk actions in the cloud, and account cre¬dentials can still be compromised. Microsoft has warned admins for years that tens of millions of AD accounts are the target of cyberattack each day.1 Besides, 34 percent of data breaches involve someone already inside the network.

Unfortunately, native Office 365 and Azure AD auditing tools leave a lot to be desired when it comes to auditing changes to roles, groups, appli¬cations, sharing and mailboxes. Their search capabilities are limited and they retain audit events in logs for only a limited time.

This eBook highlights ten security events that administrators track closely to keep their Azure AD and Office 365 environment secure. It explores the audit information they can find using native tools and consoles, and identifies the pitfalls they are most likely to encounter when pulling audit reports natively. Finally, it offers a look at a solution that can help them overcome some of these native auditing limitations.