purview-audit

Here are 2 public repositories matching this topic...

microsoft / PAX

Portable Audit eXporter (PAX) Solution: Enterprise-grade tools for Microsoft 365 audit logs analysis. Export and process Copilot and M365 apps usage data from multiple audit log sources.

Updated Feb 10, 2026
PowerShell

rickeyalaniz / 05_m365_inbox_rule_abuse_oauth_consent

Star

Simulated Microsoft 365 post compromise behavior using inbox rule abuse and OAuth consent persistence, validated evidence in Purview Audit and Entra audit logs, documented remediation and re validation workflow.

oauth incident-response cybersecurity threat-hunting soc email-security o365 m365 microsoft-defender entra-id purview-audit unified-audit-log

Updated Feb 8, 2026

Improve this page

Add a description, image, and links to the purview-audit topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the purview-audit topic, visit your repo's landing page and select "manage topics."

Learn more

Provide feedback

Saved searches

Use saved searches to filter your results more quickly