Microsoft 365 Audit & Investigation Training Course (United States & Canada)

Microsoft 365 Audit & Investigation Training Course (United States & Canada)2026-07-16T12:59:59+01:00

Course Guarantee

Gain comprehensive insights into the audit capabilities of Microsoft 365, enabling you to effectively manage and investigate your organization’s data with confidence.

What you will achieve after going on the course

  • Conduct Comprehensive Audits: You will be able to perform detailed audits within your Microsoft 365 environment, identifying and addressing potential risks and vulnerabilities. This includes using Investigation Analytics to quickly understand insider risks and customizing built-in policies to detect and investigate specific risk activities.

  • Manage Alerts and Triage: You will gain the skills to set up and manage alerts, triage incidents, and investigate issues efficiently. This ensures timely responses to potential threats by creating cases and preparing for remediation.

  • Support Litigation Procedures: You will learn how to connect investigations to litigation proceedings through an advanced eDiscovery experience. You will understand how to package information collected through events for investigations and submit evidence for legal processes.

The problems that customers are facing

Problem 1

Problem: Organizations often struggle to identify and address potential risks and vulnerabilities within their Microsoft 365 environment. This can lead to undetected security threats and compliance issues.

Solution: Implementing comprehensive audits within the Microsoft 365 environment can help organizations identify and address potential risks and vulnerabilities. This involves using tools like Microsoft Defender for Cloud Apps to uncover shadow IT, assess risks, enforce policies, investigate activities, and stop threats. By conducting regular audits, organizations can ensure that their security measures are up-to-date and effective, thereby reducing the risk of undetected security threats and compliance issues.

Problem 2

Problem: Inefficient management of alerts and triage can lead to delayed responses to potential threats, increasing the risk of data breaches and other security incidents.

Solution: Efficiently managing alerts and triage involves setting up and managing alerts, triaging incidents, and investigating issues promptly. This can be achieved by creating policies to trigger events on specific risk activities and using tools to triage alerts, investigate the actual events or issues, and prepare for remediation. By improving the management of alerts and triage, organizations can ensure timely responses to potential threats, thereby reducing the risk of data breaches and other security incidents.

Problem 3

Problem: Organizations may find it challenging to connect investigations to litigation proceedings and properly package information for legal processes. This can hinder their ability to effectively handle legal disputes and compliance audits.

Solution: Supporting litigation procedures involves connecting investigations to litigation proceedings through an Advanced eDiscovery experience. This includes using tools to package information collected through events for investigations and submitting evidence for legal processes. By enhancing their litigation support capabilities, organizations can ensure that they handle legal disputes and compliance audits more effectively.

Microsoft 365 Audit and Investigation - All You Need To Know

Choose your course type

Led by a live instructor, learn virtually (via Microsoft Teams) alongside a small group of other students. Find and book a scheduled course date below.

Duration

3 days (4 hours each day)

Certification

12 CEUs & Certificate of Completion

Learn online in your own time, and at your own pace via our eLearning platform.

Please Note

This course will be available as an eLearning course in April 2025 via our new Empower Program. Please register your interest below.

Need to educate a full team or group of people? Looking for something more bespoke? Want your training to be delivered on-site or face-to-face?

Contact us now via the Live Chat in the bottom right hand corner of your screen, or leave us a message here and we’ll get back to you.

Virtual, Instructor-Led Course

Want to talk with someone?

Contact us now via the Live Chat in the bottom right hand corner of your screen, or leave us a message here and we’ll get back to you.

About this course

This Microsoft 365 Audit & Investigation training course will guide you through the Microsoft 365 environment tools that you will need to run an internal audit and investigation within your organisation.

This course will give you the confidence to identify what information is being shared in your organisation and how to search for information inside your Microsoft 365 tenant.

You will learn how to use the Investigation Analytics, Configuring Polices, Alerts and Triage experiences, Remediation and Litigation procedure.

This course is for members of an Audit Team or anyone associated with a type of role that provides an audit function for internal investigations at all levels.

The course will cover the following topics:

Section 1
  • Overview of MS 365 Environment
  • Relationship between MS Teams and SharePoint
  • Microsoft 365 auditing solutions
  • What is Captured and Metadata – Better Data
  • User Activities
Section 2
  • Use Cases Overview
  • Introduction to MS365 Admin Centre
  • Audit (Standard) and Audit (Premium)
Section 3
  • Extending the Audit Log Retention Period
  • Running a Audit (Standard)
  • Demo of Audit (Standard) Search
  • Audit Search Activities List
Section 4
  • The Microsoft Purview Compliance Portal
  • Useful Integrations
  • Other Considerations
  • What the Audit and Investigations Team did
    Next
  • To gain an understanding of the Audit functionality of M365
  • To gain an understanding of how the Audit functionality can be used for your organisation
  • To gain an understanding of how to do an Audit (Standard) in M365
  • To understand how to interpret the audit logs to support investigations
  • To gain an overview of the M365 platform
  • Thinking about how audit investigations can be undertaken

This course is for members of an Audit Team within the Police or anyone associated with a type of role that provides an audit function for internal investigations at all levels. The ideal delegate will be one who needs both a broad understanding of Microsoft 365 features, functions and security along with an in depth understating of Microsoft 365 audit features.

Foundation Courses
  • Microsoft 365 SharePoint Fundamentals
  • Microsoft 365 SharePoint Super User
  • Microsoft 365 Teams Information Governance & Protection
  • Microsoft 365 Purview eDiscovery​
Intermediate Courses​
  • Microsoft 365 Information Architecture​
  • Microsoft 365 Purview Records Management
  • Microsoft 365Audit & Investigation
  • Microsoft 365 Purview Information Protection & Data Loss Prevention
Advanced Courses​
  • Microsoft 365 SharePoint Premium​

Contact us now via the Live Chat in the bottom right hand corner of your screen, or leave us a message here and we’ll get back to you.

Reviews

The course was fantastic. Discussion between the attendees was useful, hands on aspects were great.

Head of Information Compliance

The hands on aspect of the course was essential to understanding the concepts. I really enjoyed playing the game during the course! such a great idea.

Planning Officer

Other courses you might like

Go to Top