Shuffle
Create Office365 ATP and Content search apps
As a heads up ATP event data already comes in via existing o365mgmt api tool, one thing I haven't even touched yet is parsing the resulting data and doing something with it. Right now existing o365mgmt tool pulls ALL categories of audit data, including ATP events. We could probably break it off into chunks where you can pull just one or the other.
The way it was made to be an all in one workflow, if one of the events returned happens to be an ATP event, follow the ATP portion of the workflow etc, or if event is one I'm interested in, do some work.
That's super cool and useful! Is it possible to make the app have each of the steps as an action as well then? We should in general start documenting things better I guess.
An important point of Shuffle usage is to make the process more transparent by having seemingly complex analysis made into bulks that are understandable with a UI.
I know you know a bit more of what I mean after our last chat ;)