TopicMicrosoft 365 →
Simple definition
A diary of actions performed in a box Exchange Online.
Technical definition
Mailbox auditing records certain actions of the owner, delegates and administrators according to the available parameters.
What is it used for ?
Investigate removals, accesses or changes to the box.
Practical example
An audit can help to find out who deleted or moved a message.
Common issues
- Insufficient retention period
- Unaudited action
- Wrong interpretation of the actor
Related terms
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.