
Microsoft Purview AuditMicrosoft
Support forensic investigations and meet regulatory requirements with critical audit log events and customized retention policies.
Vendor
Microsoft
Company Website
Product details
Power your forensic and compliance investigations
- **Support forensic investigations: **Determine the scope of compromise, and access audit logs to support investigations.
- **Preserve audit logs to meet regulatory requirements: **Retain audit records for one year with the option to retain for up to 10 years.
- **Gain high-bandwidth access to data: **Get a dynamic bandwidth quota to access your auditing data.
Features
- **Customized retention policies: **Create customized audit log retention policies to retain audit records based on the service where the audited activities occur, specific audited activities, or the user who performs an audited activity.
- **Longer retention of audit records: **Retain Audit (Premium) users' audit log records of Exchange, SharePoint, OneDrive, and Microsoft Entra ID for one year by default and 180 days for all other activities. Retain audit log records for up to 10 years with an add-on license.
- **Intelligent insights: **Support investigations by providing visibility to events such as when mail items were accessed, replied to and forwarded, or when and what a user searched for in Exchange Online and SharePoint Online.
- **Higher bandwidth to the Office 365 Management Activity API: **Organizations are initially allocated a baseline of 2,000 requests per minute, where this limit will dynamically increase depending on an organization's seat count and their licensing subscription, resulting in about twice the bandwidth as organizations with Audit (Standard).