Support - Office Protect

Synopsis This guide explains how to configure Monitor in Office Protect Prerequisite You must have an Office Protect account How to The Office Protect ...

Synopsis How to define who receives Alerts and Digests in Office Protect Prerequisite You must have an Office Protect account How to Office Protect Mon...

When we suggest remediation to an alert, we will often recommend that you investigate suspicious activity by looking at the audit logs for the user. There a...

This module is meant to configure how Office Protect monitors your tenant. Monitoring records all real-time activities for your Microsoft 365 tenant and gen...

This event warns of any account deletion from Azure Active Directory. For security: deleting accounts is a very common action for vandal hackers that ga...

Multiple types of actions can trigger this event:  New administrator created Administrator account deleted User granted administrator rights User re...

Exchange gives the ability for authorized users to send emails as someone else. This can be used as part of larger operations that include phishing, or for ...

In a business setting, there are few good reasons to share business file to anonymous targets. It defeats all tracking and compliance mechanism around data ...

This event triggers when files are deleted manually from retention mechanisms like the recycle bin's recycle bin. Vandal hackers trying to remove f...

Whenever an additional license is assigned to an existing account, this event will trigger. According to the "Principle of Least Privilege", u...