Acitivity logs question

Question

Hi,

I need to help to understand the sign logs in Microsft Entra admin center. I found some external user activity in sign logs. I am confused how can i know which service is accesiing. How can i verify it's only teams meeting or teams channel or Sharepoint site? Or is there anyway we can find whose internel user send request to that unknown users?

Thank You!

Irin Sultana

Answer 1

Hi Irin,
Thanks for posting your question in the Microsoft Q&A forum.

You can click on each activity log record to view more details. In the right-side modal that opens for you, there should be a tab called "JSON" where you can find all the information you need regarding the accessed service.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful