Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Change Auditor 7.1 - Office 365 and Azure Active Directory Event Reference Guide

Table of Contents

Introduction Events

Office 365 Exchange Online Administration Office 365 Exchange Online Mailbox Office 365 SharePoint Online Office 365 OneDrive for Business Azure Active Directory

Azure Active Directory Sign-Ins Azure Active Directory Sign-in Risk Event

Azure Active Directory Sign-in Risk Event

Change Auditor audits activities in the Azure Active Directory that correspond to the events in the Risky sign-ins report in the Azure Active Directory portal.

Table 22. Azure Active Directory Sign-in risk events

Active risk event detected

Created when a new risk event is detected with an active state.

Active risk event status changed to closed

Created when an active risk event is closed as a result of being marked as:

•

Resolved: The issue has been addressed and has been safely closed.

•

False positive: The issue has been incorrectly identified as a risk and has been safely closed.

•

Ignore: The issue has been removed from the active list.

This event helps you to understand why a risk event has been manually closed.

Closed risk event status changed to active

Created when a closed risk event is reactivated.

Closed risk event detected

Created when a new risk event is detected with a closed state. This can happen if the risk event has been marked as resolved, a false positive, set to ignore, closed (remediated), closed (login blocked), closed (automatic multi-factor authentication), or closed (multiple reasons) before it has been detected by Change Auditof for the first time.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center