Monitoring

Office Protect Event - New SharePoint Site Created
SharePoint sites can be used for data extraction and can cause data proliferation. They can also generate costs for storage usage. Therefore, we recommend a...
Wed, 22 Jun, 2022 at 11:30 AM
Office Protect Event - New Teams App Installed
This event warns of any new application installed in Teams for the first time, whether it is installed org-wide, in a meeting, in a conversation, or in a sp...
Wed, 22 Jun, 2022 at 11:32 AM
Office Protect Event - SharePoint Site Deleted
Whenever a site collection is deleted, this event will trigger. Vandal hackers can do a lot of damage by deleting SharePoint sites, since the organizati...
Wed, 22 Jun, 2022 at 11:32 AM
Office Protect Event - Sign-In from Unauthorized Country
Any sign-ins from unusual countries should be investigated as possible breaches. If no business explanation is provided, consider suspending the account unt...
Thu, 8 Sep, 2022 at 10:47 AM
Office Protect Event - User Accessed with Previously Unknown Device and IP
We combine the IP address and the user agent to determine if a user is "known" to the system. A user-agent is the means the users connected to Mic...
Wed, 22 Jun, 2022 at 12:18 PM
Office Protect Event - User Consented to an App
This event warns you that a user granted consent to an application in Microsoft 365. When a user gives permissions to an external application, the event wil...
Wed, 22 Jun, 2022 at 11:39 AM
Office Protect events - Remediation actions
From the security event details page accessible in the Report section by clicking on an event, or through the "View event in Office Protect" link ...
Fri, 15 Mar, 2024 at 12:46 PM
What events can I configure in Office Protect?
The Office Protect Monitor allows you to configure the events you want to monitor and define the recipients of Alerts and Digests.   Alerts report events ...
Wed, 22 Jun, 2022 at 11:15 AM