Kurt Shintaku's Blog

In partnership with the Cybersecurity and Infrastructure Security Agency, we’re announcing new steps to protect our customers and improve the security of Microsoft cloud platforms.

Today we are expanding Microsoft’s cloud logging accessibility and flexibility even further. Over the coming months, we will include access to wider cloud security logs for our worldwide customers at no additional cost. As these changes take effect, customers can use Microsoft Purview Audit to centrally visualize more types of cloud log data generated across their enterprise.

Microsoft Purview Audit enables customers to centrally visualize cloud log data generated across their enterprise, thus helping them effectively respond to security events, forensic investigations, internal investigations and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded and retained in customers unified Purview Audit logs.

For Microsoft Purview Audit (Standard) customers (E3/G3), Microsoft will now provide:

• Detailed logs of email access and more than 30 other types of log data previously only available at the Microsoft Purview Audit (Premium) subscription level
• Increasing the default retention period from 90 days to 180 days

For Microsoft Purview Audit (Premium) customers already have:

• All available audit logging events, including “Intelligent Insights”, which help determine the scope of potential compromise by using the Audit log search – only available to Audit Premium
• 1 year default retention periods (licensable to 10 yrs retention) and automation support for importing log data into other tools for analysis  

Microsoft will begin rolling out these logging updates in September 2023 to all government and commercial customers.

Learn how this will help defend against nation-state cyber threats:

• How Microsoft is expanding cloud logging to give customers deeper security visibility
  https://www.microsoft.com/en-us/security/blog/2023/07/19/expanding-cloud-logging-to-give-customers-deeper-security-visibility/

Learn the differences between Purview Audit Standard & Premium here:

• Comparison of key abilities in Microsoft Purview Auditing solutions
  https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-solutions-overview?view=o365-worldwide#comparison-of-key-capabilities