Support - Office Protect

SharePoint sites can be used for data extraction and can cause data proliferation. They can also generate costs for storage usage. Therefore, we recommend a...

This event warns of any new application installed in Teams for the first time, whether it is installed org-wide, in a meeting, in a conversation, or in a sp...

Whenever a site collection is deleted, this event will trigger. Vandal hackers can do a lot of damage by deleting SharePoint sites, since the organizati...

Any sign-ins from unusual countries should be investigated as possible breaches. If no business explanation is provided, consider suspending the account unt...

This event is raised whenever Office Protect detects a suspicious inbox rule created or updated on a mailbox. When hackers gain access to Exchange user ...

We combine the IP address and the user agent to determine if a user is "known" to the system. A user-agent is the means the users connected to Mic...

This event warns you that a user granted consent to an application in Microsoft 365. When a user gives permissions to an external application, the event wil...

From the security event details page accessible in the Report section by clicking on an event, or through the "View event in Office Protect" link ...

How do SPF works? An SPF (Sender Policy Framework) record is a type of DNS TXT record that specifies which mail servers are authorized to send emails on...

The Office Protect Monitor allows you to configure the events you want to monitor and define the recipients of Alerts and Digests.   Alerts report events ...