Help
Unified audit feed
What it does
One place to see what happened across your Microsoft environment — sign-ins, mailbox changes, file activity — without pulling three different logs.
Try this
“Who accessed that folder last week?”
What it needs
Owner access.
What it won't do
It surfaces the audit events Microsoft records. It can't show activity that was never logged.