Some services have multiple record types for different types of activities within the same service. The previous table also identifies the record type value to use to search the audit log for activities in the corresponding service using the Search-UnifiedAuditLog cmdlet in Exchange Online PowerShell or by using a PowerShell script. ThreatIntelligence, ThreatIntelligenceUrl, ThreatFinder, ThreatIntelligenceAtpContentДЇor more information about the operations that are audited in each of the services listed in the previous table, see the Audited activities section in this article. SharePoint, SharePointFileOperation,SharePointSharingOperation, SharePointListOperation, SharePointCommentOperation MIPLabel, SensitivityLabelAction, SensitivityLabeledFileAction, SensitivityLabelPolicyMatch MIPLabel, MipAutoLabelExchangeItem, MipAutoLabelSharePointItem, MipAutoLabelSharePointPolicyLocation Microsoft 365 service or featureДЄzureActiveDirectory, AzureActiveDirectoryAccountLogon, AzureActiveDirectoryStsLogonДЄipDiscover, AipSensitivityLabelAction, AipProtectionAction, AipFileDeleted, AipHeartBeatД¬omplianceDLPSharePoint, ComplianceDLPExchangeДLPEndpoint, MSDEResponseActions, MSDEGeneralSettings, MSDEIndicatorsSettings, MSDERolesSettingsД®xchangeAdmin, ExchangeItem, ExchangeItemAggregatedДЄirInvestigation, AirManualInvestigation, AirAdminActionInvestigation, MS365DCustomDetection The following table lists the Microsoft 365 services and features (in alphabetical order) that are supported by the unified audit log. Why a unified audit log? Because you can search the audit log for activities performed in different Microsoft 365 services. Microsoft 365 services that support auditing

User's in your organization can use the audit log search tool to search for, view, and export (to a CSV file) the audit records for these operations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log. Need to find if a user viewed a specific document or purged an item from their mailbox? If so, you can use the audit log search tool in Microsoft 365 compliance center to search the unified audit log to view user and administrator activity in your organization.

How to log out of office 365