Along with Exchange Online, Change Auditor now audits user and administration activity for SharePoint Online and OneDrive for Business that correspond to the events in the Office 365 Security & Compliance Center unified audit log. You can track, report, and create alerts on activity such as when files and folders are accessed, created, deleted, uploaded, move, renamed, and checked in and out of sites. See and for the complete list of new audited events.
To facilitate the creation of Office 365 searches and reports and viewing events, the Office 365 Exchange Online subsystem has been renamed to Office 365 with the associated facilities — Office 365 Exchange Online Mailbox, Office 365 Exchange Online Administration, Office 365 SharePoint Online, and Office 365 OneDrive for Business.
The Event Details pane includes an Overview section that displays a high-level view of the activity that generated each event. For example, you can quickly see at a glance when the event occurred, who made the change, what changed, where the change originated (IP address), the activity as defined by the Office 365 Management API schema (operation), event ID, object site, path, or other identifier, record type, source relative Url, and user agent. Other fields may be displayed on an event-specific basis, for instance "From" and "To" for move and copy events.