RecordType

RecordType enumeration

Audit record types

Members

Member nameDescription
EXCHANGE_ADMINEvents from the Exchange admin audit log.
EXCHANGE_ITEMEvents from an Exchange mailbox audit log for actions that are performed on a single item, such as creating or receiving an email message.
EXCHANGE_ITEM_GROUPEvents from an Exchange mailbox audit log for actions that can be performed on multiple items, such as moving or deleted one or more email messages.
SHARE_POINTSharePoint events.
SHARE_POINT_FILE_OPERATIONSharePoint file operation events.
AZURE_ACTIVE_DIRECTORYAzure Active Directory events.
AZURE_ACTIVE_DIRECTORY_ACCOUNT_LOGONAzure Active Directory OrgId logon events (deprecating).
DATA_CENTER_SECURITY_CMDLETData Center security cmdlet events.
COMPLIANCE_DLP_SHARE_POINTData loss protection (DLP) events in SharePoint and OneDrive for Business.
SWAYEvents from the Sway service and clients.
COMPLIANCE_DLP_EXCHANGEData loss protection (DLP) events in Exchange, when configured via Unified DLP Policy. DLP events based on Exchange Transport Rules are not supported.
SHARE_POINT_SHARING_OPERATIONSharePoint sharing events.
AZURE_ACTIVE_DIRECTORY_STS_LOGONSecure Token Service (STS) logon events in Azure Active Directory.
SECURITY_COMPLIANCE_CENTER_EOP_CMDLET
POWER_BI_AUDITPower BI events.
CRMMicrosoft CRM events.
YAMMERYammer events.
SKYPE_FOR_BUSINESS_CMDLETSSkype for Business events.
DISCOVERY
MICROSOFT_TEAMSEvents from Microsoft Teams.
MICROSOFT_TEAMS_ADD_ONSEvents from Microsoft Teams Add-ons.
MICROSOFT_TEAMS_SETTINGS_OPERATIONSettings changes from Microsoft Teams.
THREAT_INTELLIGENCEPhishing and malware events from Exchange Online Protection and Office 365 Advanced Threat Protection.
MICROSOFT_FLOWMicrosoft Flow events.
MICROSOFT_STREAMMicrosoft Stream events.
PROJECTMicrosoft Project events.
SHAREPOINT_LIST_OPERATIONSharepoint List events.
SECURITY_COMPLIANCE_ALERTSSecurity and compliance alert signals.
THREAT_INTELLIGENCE_URLSafe links time-of-block and block override events from Office 365 Advanced Threat Protection.
THREAT_INTELLIGENCE_ATP_CONTENTPhishing and malware events for files in SharePoint, OneDrive for Business, and Microsoft Teams from Office 365 Advanced Threat Protection.

See Also