Sentinel-Queries icon indicating copy to clipboard operation
Sentinel-Queries copied to clipboard
verified publisher icon reprise99

Create officeactivity-purviewsendasaudit.kql

Open jongross4 opened this issue 2 years ago • 0 comments

This sentinel query will combine output from OfficeActivity and EmailEvents to report usage of SendAs and SendOnBehalf rights.

jongross4 avatar Mar 15 '23 15:03 jongross4