O365Undo is a great script you can use to roll back actions of your\u00a0user(s) in Office 365. Most likely, actions your user wasn’t aware of but were actually done by a CryptoLocker or by RansomWare. These nasty virusses can cause havoc on your mapped or synced Sharepoint Online or Onedrive for Business libraries in the form of file level encryption or file name obfuscation.<\/p>\n
O365Undo\u00a0requires that you have enabled the Unified Audit Log<\/a>\u00a0in Office 365.<\/strong><\/p>\n If you have done so, O365Undo can reverse<\/em> the following actions your user took in Onedrive, Sharepoint or an Office 365 Group up till a given date (max time back is when you enabled the Universal Audit Log):<\/p>\n How to use<\/strong><\/p>\n What it won’t (yet) do:<\/strong><\/p>\n Disclaimer<\/strong><\/p>\n I’m not a real programmer, this code is meant as a Proof Of Concept. I do not guarantee this product will work in your setup, and I offer no dedicated support, I try to help everyone on a best-effort basis but also have to work for a living.<\/p>\n This tool is not actively maintained, make sure you test it before running in a production environment!<\/span><\/p>\n Download<\/strong><\/p>\n O365Undo_V0.5.ps1<\/a>\u00a0(right click, save as)<\/p>\n","protected":false},"excerpt":{"rendered":" O365Undo is a great script you can use to roll back actions of your\u00a0user(s) in Office 365. Most likely, actions your user wasn’t aware of but were actually done by a CryptoLocker or by RansomWare. These nasty virusses can cause havoc on your mapped or synced Sharepoint Online or Onedrive for Business libraries in the … Continue reading O365Undo<\/span> \n
\n
\n