drop m365 unified audit log json or csv · flag inbox forward rules · mailbox forwarding · bulk downloads · global admin role adds · high-scope consent · audit log disabled · runs locally
unified audit log
drop UAL JSON or CSV
search-unifiedauditlog export · compliance center
flags inbox forward external · bulk FileDownloaded · Global Admin role add · OAuth high scopes · audit disabled
drop m365 unified audit log json or csv