syne0 / osprey

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
MIT License
6 stars 2 forks source link

Add Entra Audit Log obtaining function #29

Open syne0 opened 3 months ago

syne0 commented 3 months ago

Used to be available with the AzureAD powershell but that's not to be used anymore. I think it was mostly ported over to Get-MgAuditLogDirectoryAudit but it's been unreliable. prehaps the new Entra ID PowerShell module will be more helpful, or I need to revisit using the graph commands again.