Show Notes
In this episode, we take a comprehensive plunge into the Microsoft Purview Unified Audit log, unraveling its capacity to enable organizations in vigilant monitoring and meticulous activity tracking. Our dialogue encompasses the significance of Microsoft Purview Audit Premium, set to be free with E3 or E5 this September. We also discuss the Storm-0558 threat that took place in July 2023, and how Microsoft responded to mitigate this issue. Moreover, we outline the distinct divergences within the Audit logs, contingent on the utilization of either an E3 or E5 license.
Important links:
Analysis of Storm-0558 techniques for unauthorized email access: https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/
Microsoft Blog announcing the new change to audit events that are available with standard licenses: https://www.microsoft.com/en-us/security/blog/2023/07/19/expanding-cloud-logging-to-give-customers-deeper-security-visibility/?ranMID=24542&ranEAID=TnL5HPStwNw&ranSiteID=TnL5HPStwNw-HD0Iy8FEe1Ypa.QDOprQkQ&epi=TnL5HPStwNw-HD0Iy8FEe1Ypa.QDOprQkQ&irgwc=1&OCID=AIDcmm549zy227_aff_7593_1243925&tduid=%28ir__cevxmjhgxskfdzrubqrmalsqxe2xepde1rz1h9g900%29%287593%29%281243925%29%28TnL5HPStwNw-HD0Iy8FEe1Ypa.QDOprQkQ%29%28%29&irclickid=_cevxmjhgxskfdzrubqrmalsqxe2xepde1rz1h9g900
Microsoft’s Threat Intelligence Blog: https://www.microsoft.com/en-us/security/blog/topic/threat-intelligence/?sort-by=newest-oldest&date=any
DOWNLOAD THIS PODCAST
More from Microsoft 365 Voice
Too many meetings. Too much context switching. Not enough focus time. In this episode, we get candid about mental health at work and share how they use Microsoft 365, Copilot, focus time, and asynchronous catch-up to reduce information overload and protect their energy.
New M365 Voice episode! We discuss Microsoft’s latest Restricted Content Discovery (RCD) update for SharePoint and Copilot (MC1427972), why it matters for security, and what it means for AI governance, permissions, and sensitive content protection.
Live from TechCon365 Chicago, we discussed Microsoft’s announcement that Copilot Cowork will be generally available on July 1st. We took a closer look at what Cowork is designed to do, explored its key capabilities, and shared our hands-on experience using it so far. We also reviewed the latest updates around GA pricing, including how the model has changed and what organizations should consider as they evaluate adoption.
Explore Agent 365 with us as we break down Microsoft’s new AI governance solution, covering capabilities, challenges, and why it matters for every M365 organization.
In this episode we explored SharePoint vs. OneDrive Copilot agents and real-world use cases. We unpack the current limitations of OneDrive agents (including the 20-file cap), why that impacts adoption, and whether SharePoint agents offer more value today. The conversation also explores governance, productivity, and what we hope to see next from Microsoft’s roadmap.