Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
- Conduct investigations with Microsoft Purview Audit.
After completing this module, you'll be able to:
- Describe how Microsoft Purview Audit records, retains, and exposes activity across Microsoft 365.
- Configure Audit (Standard) or Audit (Premium) for the users, services, and retention windows your compliance requirements call for.
- Run audit searches from the Microsoft Purview portal and PowerShell to surface evidence of user and admin activity.
- Extend the same search to Copilot and AI app activity across first-party, connected, and non-Microsoft record types.
- Investigate message-level access with Audit (Premium) events like MailItemsAccessed.
- Analyze and report on audit results by parsing exports and joining across record types.
- Use Microsoft Purview eDiscovery to search for content across Microsoft 365. This module covers how to configure cases, define search criteria, and locate messages, files, and other organizational data.
In this module you learn how to:
- Assign the roles and permissions to access Microsoft Purview eDiscovery
- Create and manage cases used to run eDiscovery searches
- Define search scope and build queries using conditions, keywords, and Copilot-generated prompts
- Run searches and validate results using statistics or random samples
