立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Change Auditor 7.1.1 - Office 365 and Azure Active Directory Event Reference Guide

Introduction Events

Office 365 Exchange Online Administration Office 365 Exchange Online Mailbox Office 365 SharePoint Online Office 365 OneDrive for Business Azure Active Directory

Azure Active Directory Sign-Ins Azure Active Directory Sign-in Risk Event

Azure Active Directory Sign-in Risk Event

Change Auditor audits activities in the Azure Active Directory that correspond to the events in the Risky sign-ins report in the Azure Active Directory portal.

Table 22. Azure Active Directory Sign-in risk events

Active risk event detected

Created when a new risk event is detected with an active state.

Active risk event status changed to closed

Created when an active risk event is closed as a result of being marked as:

•

Resolved: The issue has been addressed and has been safely closed.

•

False positive: The issue has been incorrectly identified as a risk and has been safely closed.

•

Ignore: The issue has been removed from the active list.

This event helps you to understand why a risk event has been manually closed.

Closed risk event status changed to active

Created when a closed risk event is reactivated.

Closed risk event detected

Created when a new risk event is detected with a closed state. This can happen if the risk event has been marked as resolved, a false positive, set to ignore, closed (remediated), closed (login blocked), closed (automatic multi-factor authentication), or closed (multiple reasons) before it has been detected by Change Auditof for the first time.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center