While building a Microsoft 365 security platform, I encountered a simple but important design question: Should the dashboard rely on its database, or should it query the Microsoft Graph API every time? The database […]
Imagine arriving at your office one morning only to discover that confidential customer data has been stolen, employee accounts have been compromised, and business operations have come to a standstill. […]
A previous post (Three Microsoft Purview Audit Surfaces: Use Cases and Best Practices) covered the three audit surfaces — the Unified Audit Log, the Management Activity API, and CloudAppEvents — and how […]
Comparing UAL, Management Activity API, and CloudAppEvents Introduction Audit logs are systematically organized records documenting activities within Microsoft 365 Audit Logs, detailing the actor, action, timestamp, origin, and affected resource. Microsoft Purview Audit […]