product-example 2 linked patterns checked
Microsoft Learn: Learn about auditing solutions in Microsoft Purview
Documents unified audit logs for monitoring user and admin operations across Microsoft services, with security investigation and compliance obligations.
Read with a purpose
What this source can teach
Use this source to inspect a concrete implementation and the decisions visible in its context.
- Start with the original. Open the source and find the guidance or example relevant to your task.
- Trace the connection. Use the claim notes below to see how this site applies the source to specific patterns.
- Check the setting. Compare the source's platform, people, and constraints with your own decision.
Pattern Decisions This Source Supports
| Pattern | Supported decision | Required contract | Claim note |
|---|---|---|---|
| Activity log | Choose activity log when the task is evidence review, investigation, compliance, security monitoring, or operational troubleshooting. | Each log row identifies one recorded event and keeps actor, action, object, timestamp, and event ID stable across filtering, sorting, expansion, export, and refresh. | Microsoft supports unified audit logs for investigation and compliance across user and admin operations. |
| Audit log | Choose audit log when the record must support governed security, compliance, forensic, or administrator-accountability review. | Each audit row represents one governed audit record and keeps audit ID, actor, action, object, effective time, result, and retention metadata stable across filters, details, export, and API retrieval. | Supports unified audit logs, security and compliance investigation, retention tiers, export, API access, SIEM import, and retention policies. |
Comparisons supported by this source
- Activity log vs timeline vs notification center vs search history
Microsoft supports unified audit logs for security investigation and compliance obligations across services.
- Audit log vs activity log vs AI output audit trail vs version history vs notification center
Supports audit records for security, forensic, compliance, retention, export, API, and SIEM workflows.
Evidence Role
This source is treated as product-example evidence. Its value comes from the specific claims and setting described above.
Publisher: Microsoft Learn. Last checked: .