Uncover Insights with Microsoft 365 Copilot: How to Conduct Audit Log and Content Searches

Uncover Insights with Microsoft 365 Copilot: How to Conduct Audit Log and Content Searches

Microsoft 365 Copilot offers a range of capabilities to help you unlock insights and maintain compliance across your organization’s digital landscape. When you’re tasked with auditing activities or searching through content, Copilot makes the process more intuitive. Whether you’re tracking user actions or exploring the depths of your document libraries, mastering audit log and content searches is key to keeping your Microsoft 365 environment secure and compliant. Let’s dive into how you can leverage these tools to gain deeper insights and ensure your data’s integrity.

Audit Log Search for Copilot Prompts

1. Go to Microsoft 365 https://compliance.microsoft.com/.

2. Go to Audit and make sure Auditing is enabled. If not, then click on “Start Recording User and Admin Activity”.

3. Once enabled in “New Search”, select filters as per condition, and select the Activity “Interacted with Copilot”.

4. Run the search and you should get the results in Audit Search.

Content Search for Co-Pilot Prompts and Search

1. Go to Microsoft 365 https://compliance.microsoft.com/.

2. Go to “Content Search” and start a new search. Make sure your account has all the required permissions to run and export a content search. Please refer to this link for more information around permissions – https://learn.microsoft.com/en-us/purview/ediscovery-assign-permissions

3. On next page, select the location and select user.

4. Next, while we select Conditions, click on “Add Condition” then select “Type”.

5. Click on “Add/Remove more options” and select “CoPilot Interactions”.

6. Submit the search and export the results.

7. The results will be exported and can be downloaded as a PST. Open the PST in Outlook and we can see all the interactions as separate messages.

Conclusion

Mastering audit log search and content search in Microsoft 365 Copilot is essential for maintaining compliance, ensuring security, and managing risk. By following the steps outlined in this blog, you can effectively track user activities, investigate security incidents, and ensure your organization’s data is well-monitored and protected. These skills are crucial for any business using Microsoft 365, offering peace of mind and a proactive approach to managing your digital environment.

If you need further assistance or expert guidance on Microsoft 365 Copilot, our team at AW Infrasec is here to help. Reach out to us at info@awinfracloud.com for personalized support and insights. We’re dedicated to ensuring you get the most out of your Microsoft 365 experience.

Scroll to Top