This article reviews how to perform a quick self-audit of your Microsoft 365 account.
Use the instructions below if requested by ProtectiCloud, or if you have any concerns or suspicions regarding unauthorized access to your Microsoft 365 account.
If you find any activity on your account that you do not recognize, please reach out to our support team immediately.
Note: The instructions below are a tool that can help identify access, whether it is valid or invalid.
At no point should any recognized or unrecognized activity be defined as anything (breach, hack, etc.) until officially labeled as such by legal counsel or based on predefined definitions in an incident response plan.
Note: "My Sign-Ins" only provides logs for the last 30 calendar days.
- Sign into your Microsoft 365 account
https://portal.office.com
- Once signed in, select your name on top right corner, and select, "View Account".
- On the Microsoft 365 Account Window > Select "My Sign-Ins".
- Review the Logs - And used the below legend to determine if its Familiar/expected, or un-familiar/non-expected.
Activity - Type of Activity, Sign in, Application Sign-In, Windows Sign-In, etc.
Location - Location detected at time of Activity
Operating System - The System used for the Activity
Application - Type of App used during the activity
Account - The account used at time of Activity.