{"id":861,"date":"2016-06-29T13:53:51","date_gmt":"2016-06-29T13:53:51","guid":{"rendered":"https:\/\/www.lieben.nu\/liebensraum\/?p=861"},"modified":"2016-06-29T13:53:51","modified_gmt":"2016-06-29T13:53:51","slug":"do-not-forget-to-enable-the-unified-audit-log","status":"publish","type":"post","link":"https:\/\/lieben.nu\/liebensraum\/2016\/06\/do-not-forget-to-enable-the-unified-audit-log\/","title":{"rendered":"Do not forget to enable the Unified Audit Log"},"content":{"rendered":"<p>Office 365 and all related services have various forms of auditing options, it&#8217;s a pain to monitor and configure them all.<\/p>\n<p>A while back, Microsoft unified these auditing logs into the Unified Audit Log. <a href=\"https:\/\/support.office.com\/en-us\/article\/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c\">The Unified Audit Log for Office 365 is super easy to configure.<\/a><\/p>\n<p>For all my customers I\u00a0<strong>always\u00a0<\/strong>enable this free feature, it is pretty much the only way you can have a RPO of 0 when you need to undo changes \/ deletes or restore data, and gives you a very nice and compliant audit log of everything your users\u00a0<strong>and admins<\/strong> do in your environment.<\/p>\n<p>In addition, it allows me to help you automatically reverse nasty CryptoLocker actions like mass file and folder renames and <a href=\"https:\/\/www.lieben.nu\/liebensraum\/2016\/06\/o365anticryptolocker-restores-the-previous-version-of-your-files-in-sharepoint-online-or-onedrive-for-business\/\">restore previous versions in bulk<\/a>.<\/p>\n<p>edit: you can also <a href=\"https:\/\/www.lieben.nu\/liebensraum\/2016\/07\/programmatically-enabling-or-disabling-the-unified-audit-log-in-office-365\/\">enable the audit log programatically<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Office 365 and all related services have various forms of auditing options, it&#8217;s a pain to monitor and configure them all. A while back, Microsoft unified these auditing logs into the Unified Audit Log. The Unified Audit Log for Office 365 is super easy to configure. For all my customers I\u00a0always\u00a0enable this free feature, it &hellip; <a href=\"https:\/\/lieben.nu\/liebensraum\/2016\/06\/do-not-forget-to-enable-the-unified-audit-log\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Do not forget to enable the Unified Audit Log<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[32,43],"tags":[],"class_list":["post-861","post","type-post","status-publish","format-standard","hentry","category-office-365","category-security"],"_links":{"self":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/comments?post=861"}],"version-history":[{"count":0,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/861\/revisions"}],"wp:attachment":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/media?parent=861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/categories?post=861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/tags?post=861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}