Monitoring Office 365 Nico Martens About me Nico

Monitoring Office 365 Nico Martens

About me Nico Martens Technical Lead @ @martensnico https: //www. linkedin. com/in/martensnico/ https: //sharepointrelated. com

Agenda Ø Ø Ø Ø Importance of monitoring Office 365 Usage User & Admin activity Security / External sharing Availability Performance Applications

Importance of monitoring Office 365 Ø Gain insight in how users use the platform Ø Can help determining guidelines Ø Prevent data leaks Ø Detect anomalies

Choose what you need No out-of-the-box one stop solution (yet? )

Usage https: //admin. microsoft. com/Adminportal/Home? source=applauncher#/reports. Usage

Usage Power. BI – Office 365 Adoption https: //admin. microsoft. com/Adminportal/Home? source=applauncher#/reports. Usage

User activity https: //protection. office. com/unifiedauditlog

Admin activity Reference: https: //blogs. technet. microsoft. com/sharepointdevelopersupport/2018/01/18/retrieve-granular-user-actions-or-usagereports-using-search-unifiedauditlog-cmdlet/

Security - Risks

Security - Solutions https: //www. microsoft. com/security/blog/2018/06/06/cybersecurity-referencearchitecture-security-for-a-hybrid-enterprise/

Security – Mail forwarding https: //protection. office. com/mailflow/dashboard

Security – Global monitoring https: //security. microsoft. com/securescore

External sharing - sites https: //<tenant>-admin. sharepoint. com/_layouts/15/online/Admin. Home. aspx#/site. Management

External sharing - users https: //absolute-sharepoint. com/2018/03/create-a-report-of-sharepoint-online-external -users-with-powershell. html

External sharing - users https: //absolute-sharepoint. com/2018/03/bug-in-get-spoexternaluser-powershell-notall-external-users-are-returned-anymore. html

Availability https: //portal. office. com/adminportal/home#/servicehealth

Performance Ø Developer tools Ø Fiddler Ø SCOM with 3 rd party management pack Ø 3 rd party applications

Applications https: //tenant. portal. cloudappsecurity. com/#/app-permissions

Combining data https: //github. com/Azure-Sentinel

Another option https: //protection. office. com/insightdashboard

Another option

Recap

Thanks for attending