External/powershell-scripts
1
0
Fork 0
mirror of https://github.com/admindroid-community/powershell-scripts.git synced 2025-12-17 08:25:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Audit Compromised User Activities with Session ID

Browse Source
This commit is contained in:
AdminDroid 2025-08-19 18:30:43 +05:30
parent e0526d4c5b
commit 4065c83e34
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
Audit Compromised User Activities from a Specific Session/README.md Normal file
View File

@ -0,0 +1,16 @@
## Trace Session ID-Based Activities Across Microsoft 365 Using PowerShell
The script helps security teams rebuild the user’s activity timeline by collecting session ID-based audit logs in a consistent and easy-to-analyze format.
***Sample Output:***
Find the script output log file in CSV format that shows the result of the operation.
![Session ID-based Audit Logs](https://blog.admindroid.com/wp-content/uploads/2025/08/Session-ID-based-Audit-Logs.png)
## Microsoft 365 Reporting Tool by AdminDroid
Looking for more in-depth reporting? [AdminDroid Microsoft 365 reporting tool](https://admindroid.com/?src=GitHub) offers an extensive collection of 3,500+ out-of-the-box reports and dashboards. It’s the perfect complement to your PowerShell scripts.
*View more comprehensive audit reports through AdminDroid: [*http://localhost:8080/#/M365/1/1/reports/29801/1/20?nodeId=3439*](http://localhost:8080/#/M365/1/1/reports/29801/1/20?nodeId=3439)*