Monitoring Office 365 Nico Martens About me Nico
Monitoring Office 365 Nico Martens
About me Nico Martens Technical Lead @ @martensnico https: //www. linkedin. com/in/martensnico/ https: //sharepointrelated. com
Agenda Ø Ø Ø Ø Importance of monitoring Office 365 Usage User & Admin activity Security / External sharing Availability Performance Applications
Importance of monitoring Office 365 Ø Gain insight in how users use the platform Ø Can help determining guidelines Ø Prevent data leaks Ø Detect anomalies
Choose what you need No out-of-the-box one stop solution (yet? )
Usage https: //admin. microsoft. com/Adminportal/Home? source=applauncher#/reports. Usage
Usage Power. BI – Office 365 Adoption https: //admin. microsoft. com/Adminportal/Home? source=applauncher#/reports. Usage
User activity https: //protection. office. com/unifiedauditlog
Admin activity Reference: https: //blogs. technet. microsoft. com/sharepointdevelopersupport/2018/01/18/retrieve-granular-user-actions-or-usagereports-using-search-unifiedauditlog-cmdlet/
Security - Risks
Security - Solutions https: //www. microsoft. com/security/blog/2018/06/06/cybersecurity-referencearchitecture-security-for-a-hybrid-enterprise/
Security – Mail forwarding https: //protection. office. com/mailflow/dashboard
Security – Global monitoring https: //security. microsoft. com/securescore
External sharing - sites https: //<tenant>-admin. sharepoint. com/_layouts/15/online/Admin. Home. aspx#/site. Management
External sharing - users https: //absolute-sharepoint. com/2018/03/create-a-report-of-sharepoint-online-external -users-with-powershell. html
External sharing - users https: //absolute-sharepoint. com/2018/03/bug-in-get-spoexternaluser-powershell-notall-external-users-are-returned-anymore. html
Availability https: //portal. office. com/adminportal/home#/servicehealth
Performance Ø Developer tools Ø Fiddler Ø SCOM with 3 rd party management pack Ø 3 rd party applications
Applications https: //tenant. portal. cloudappsecurity. com/#/app-permissions
Combining data https: //github. com/Azure-Sentinel
Another option https: //protection. office. com/insightdashboard
Another option
Recap
Thanks for attending
- Slides: 26