Security and Complaince

Question

We want to check the reports of email deletions from a mailbox i.e. soft delete , hard delete , Move to Deleted Items. In office 365 portal from where we can download such report.

Answer 1

Hi @Microsoft Q & A ,
Starting in January 2019, Microsoft is turning on mailbox audit logging by default for all organizations. If your tenant has created before 2019 or you want to audit all the mailbox actions, you must enable mailbox auditing through PowerShell.
Manage mailbox auditing - Microsoft Purview (compliance) | Microsoft Learn

Notes:Although mailbox audit logging on by default is enabled for all organizations, only users with E5 licenses will return mailbox audit log events in audit log searches in the Microsoft Purview compliance portal or via the Office 365 Management Activity API by default.

You could choose one of workarounds in following link to search mailbox audit log:
Manage mailbox auditing - Microsoft Purview (compliance) | Microsoft Learn

If you want to search audit logs in the Microsoft Purview compliance portal, please refer to steps in this official document :
Search the audit log in the Microsoft Purview compliance portal - Microsoft Purview (compliance) | Microsoft Learn

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.