Office 365 report help

[The_IT_Guy]

We had an employees office 365 account compromised. Does anyone know if you can run a report that shows which emails have been read and which IP address this was done from? If so how.

 

We need to establish what data has been accessed.

 

Thanks

[chaplic]

No - unless you've got E5 licensing and it's turned on

 

aad.portal.azure.com will give you basic access logging as will the powershell search-mailboxauditlog