Forum Discussion
Missing auditability on use of Explorer and Advanced Hunting
Considering Defender for Office's Explorer and Advanced Hunting can be used to get insight into very sensitive data we assumed this activity is auditable, but unfortunately not.
A Microsoft Support request confirmed it's not, and we're confused as to why and would highly request Microsoft to implement audit tracking for any user, including queries used.
Explorer gives access to email subjects and Advanced Hunting can be used to view users files etc so from a GDPR and tracking point of view we need to be able to audit our SOC team and other admins on when they access potential personal information.
Hi Pal Espen Bru,
Currently, as far as I know, these activities aren't auditable, which does pose a challenge for tracking access to sensitive data. While it’s understandable that you’d want this for GDPR compliance, Microsoft has yet to implement this feature. It would be great if they could add this capability to improve oversight and security. Hopefully, they’ll consider it in near future updates but for now still waiting.
Regards
