Recorded 26 Oct 2026 at 06:24 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Security (v1.0): 428 API change passages
Added the AlertSubmission member to the auditLogRecordType enumeration. Removed the ReportSubmission member from the auditLogRecordType enumeration. Added the AlertSubmissionResultDetail member to the auditLogRecordType enumeration. Removed the ReportSubmissionResultDetail member from the auditLogRecordType enumeration. Added the ComplianceSitGradingSharePoint member to the auditLogRecordType enumeration. Added the CompliancePolicyGradingSharePoint member to the auditLogRecordType enumeration. Added the AzureAISearchAudit member to the auditLogRecordType enumeration. Added the P4AIRiskScoreRecord member to the auditLogRecordType enumeration. Added the DragonCopilotAdmin member to the auditLogRecordType enumeration. Added the AISpanOutputs member to the auditLogRecordType enumeration. Added the EopSubmissionFeedEntity member to the auditLogRecordType enumeration. Added the SonarFileDetonationEntity member to the auditLogRecordType enumeration. Added the SonarSubmissionEntity member to the auditLogRecordType enumeration. Added the SonarUrlDetonationEntity member to the auditLogRecordType enumeration. Added the SubmissionEntity member to the auditLogRecordType enumeration. Added the SonarDetonationEntity member to the auditLogRecordType enumeration. Added the MicrosoftTeamsUserConcern member to the auditLogRecordType enumeration. Added the VivaGlintAgenticCampaign member to the auditLogRecordType enumeration. Added the MSPVectorSearchContentMetadata member to the auditLogRecordType enumeration. Added the FabricPolicy member to the auditLogRecordType enumeration. Added the SecurityCopilotAgentIdentityManagement member to the auditLogRecordType enumeration. Added the CopilotSessionSharing member to the auditLogRecordType enumeration. Added the DragonCopilotAccess member to the auditLogRecordType enumeration. Added the DragonCopilotClinicalData member to the auditLogRecordType enumeration. Added the DragonCopilotSession member to the auditLogRecordType enumeration. Added the aISpanOutputsAuditRecord resource. Added the alertSubmissionAuditRecord resource. Added the alertSubmissionResultDetailAuditRecord resource. Added the dynamicProperties property to the auditData resource. Added the auditRecordTypeDictionary resource. Added the azureAISearchAuditRecord resource. Added the compliancePolicyGradingSharePointAuditRecord resource. Added the complianceSitGradingSharePointAuditRecord resource. Added the copilotSessionSharingAuditRecord resource. Added the eopSubmissionFeedEntityAuditRecord resource. Added the fabricPolicyRecord resource. Added the microsoftTeamsUserConcernAuditRecord resource. Added the mspVectorSearchContentMetadataAuditRecord resource. Added the p4AIRiskScoreRecord resource. Added the securityCopilotIdentityManagementAuditRecord resource. Added the sonarDetonationEntityAuditRecord resource. Added the sonarFileDetonationEntityAuditRecord resource. Added the sonarSubmissionEntityAuditRecord resource. Added the sonarUrlDetonationEntityAuditRecord resource. Added the submissionEntityAuditRecord resource. Added the vivaGlintAgenticCampaignAuditRecord resource. Added the MosAgentInfoRecordV2 member to the auditLogRecordType enumeration. Added the SecurityDevelopmentLifecycleAILog member to the auditLogRecordType enumeration. Added the MDASH member to the auditLogRecordType enumeration. Added the DefenderSecurityForAIConfiguration member to the auditLogRecordType enumeration. Added the SparkCoreCustomLivePool member to the auditLogRecordType enumeration. Added the mosAgentInfoRecordV2 resource type. Added the securityDevelopmentLifecycleAILogAuditRecord resource type. Added the mDASHAuditRecord resource type. Added the defenderSecurityForAIConfigurationAuditRecord resource type. Added the sparkCoreCustomLivePoolRecord resource type. Added the dragonCopilotAccessRecord resource type. Added the dragonCopilotAdminRecord resource type. Added the dragonCopilotClinicalDataRecord resource type. Added the dragonCopilotSessionRecord resource type. Added the a365AiExecuteTool resource. Added the a365AiInferenceCall resource. Added the a365AiInvokeAgent resource. Added the a365AiRunSummary resource. Added the a365SpanOutputs resource. Added the aadRiskDetectionAuditRecord resource. Added the aedAuditRecord resource. Added the agentAdminActivityRecord resource. Added the agentSettingAdminActivity resource. Added the aiAppInteractionAuditRecord resource. Added the aiExecuteToolAuditRecord resource. Added the aiInteractionsChangeNotificationAuditRecord resource. Added the aiInteractionsExportAuditRecord resource. Added the aiInteractionsSubscriptionAuditRecord resource. Added the aiInvokeAgentAuditRecord resource. Added the aipDiscover resource. Added the aipFileDeleted resource. Added the aipHeartBeat resource. Added the aipProtectionActionLogRequest resource. Added the aipScannerDiscoverEvent resource. Added the aipSensitivityLabelActionLogRequest resource. Added the airAdminActionInvestigationData resource. Added the airInvestigationData resource. Added the airManualInvestigationData resource. Added the attackSimAdminAuditRecord resource. Added the attackSimAuditRecord resource. Added the auditConfigAuditRecord resource. Added the auditSearchAuditRecord resource. Added the azfwApplicationRuleAggregationEventRecord resource. Added the azfwDnsQueryEventRecord resource. Added the azfwNetworkRuleEventRecord resource. Added the azureActiveDirectoryAccountLogonAuditRecord resource. Added the azureActiveDirectoryAuditRecord resource. Added the azureActiveDirectoryStsLogonAuditRecord resource. Added the campaignAuditRecord resource. Added the ccraiPolicyViolationRecord resource. Added the cdpClassifierHealthRecord resource. Added the cdpColdCrawlStatusRecord resource. Added the cdpConsumptionResourceRecord resource. Added the cdpContentExplorerAggregateRecord resource. Added the cdpDlpSensitiveEndpointAuditRecord resource. Added the cdpLogRecord resource. Added the cdpOcrBillingRecord resource. Added the cdpResourceScopeChangeEventRecord resource. Added the cdpdlmaiInteractionInsightsRecord resource. Added the cloudUpdateDeviceConfigAuditRecord resource. Added the cloudUpdateProfileConfigAuditRecord resource. Added the cloudUpdateTenantConfigAuditRecord resource. Added the complianceConnectorAuditRecord resource. Added the complianceDLMExchangeAuditRecord resource. Added the complianceDLMSharePointAuditRecord resource. Added the complianceDLPApplicationsAuditRecord resource. Added the complianceDLPApplicationsClassificationAuditRecord resource. Added the complianceDLPEndpointAuditRecord resource. Added the complianceDLPEndpointDiscoveryAuditRecord resource. Added the complianceDLPEnforcementAuditRecord resource. Added the complianceDLPExchangeAuditRecord resource. Added the complianceDLPExchangeClassificationAuditRecord resource. Added the complianceDLPExchangeClassificationCdpRecord resource. Added the complianceDLPExchangeDiscoveryAuditRecord resource. Added the complianceDLPSharePointAuditRecord resource. Added the complianceDLPSharePointClassificationAuditRecord resource. Added the complianceDLPSharePointClassificationCdpRecord resource. Added the complianceDLPSharePointClassificationExtendedAuditRecord resource. Added the complianceExchangeOcrAuditRecord resource. Added the complianceManagerActionRecord resource. Added the complianceSettingsChangeAuditRecord resource. Added the complianceSupervisionExchangeAuditRecord resource. Added the connectedAIAppInteractionAuditRecord resource. Added the consumptionResourceAuditRecord resource. Added the contentStoreMetadataRecord resource. Added the copilotAgentManagementAuditRecord resource. Added the copilotForSecurityLoggingAuditRecord resource. Added the copilotForSecurityTriggerAuditRecord resource. Added the copilotInteractionAuditRecord resource. Added the copilotPluginSettingAuditRecord resource. Added the copilotPromptBookSettingAuditRecord resource. Added the copilotSettingAuditRecord resource. Added the copilotWorkspaceSettingAuditRecord resource. Added the coreReportingSettingsAuditRecord resource. Added the cortanaBriefingAuditRecord resource. Added the criticalAssetManagementClassificationRecord resource. Added the crmEntityOperationAuditRecord resource. Added the crossTenantAccessPolicyAuditRecord resource. Added the customerKeyServiceEncryptionAuditRecord resource. Added the dataCenterSecurityCmdletAuditRecord resource. Added the dataGovernanceAuditRecord resource. Added the dataInsightsRestApiAuditRecord resource. Added the dataLakeExportOperationAuditRecord resource. Added the dataSecurityInvestigationAuditRecord resource. Added the dataShareOperationAuditRecord resource. Added the defenderCaseManagementAuditRecord resource. Added the defenderPreviewFeaturesRecord resource. Added the deployFeatureActivityRecord resource. Added the deviceDiscoverySettingsAuthenticatedScansRecord resource. Added the deviceDiscoverySettingsExclusionRecord resource. Added the deviceDiscoverySettingsRecord resource. Added the discoveryAuditRecord resource. Added the dlpEndpointAuditRecord resource. Added the dlpImportResultAuditRecord resource. Added the dlpSensitiveInformationTypeRulePackageCmdletRecord resource. Added the dynamics365BusinessCentralAuditRecord resource. Added the ehrConnectorAuditBaseRecord resource. Added the exchangeAdminAuditRecord resource. Added the exchangeAggregatedMailboxAuditRecord resource. Added the exchangeAggregatedOperationRecord resource. Added the exchangeMailboxAuditGroupRecord resource. Added the exchangeMailboxAuditRecord resource. Added the fabricAuditRecord resource. Added the healthcareSignalRecord resource. Added the hostedRpaAuditRecord resource. Added the hrSignalAuditRecord resource. Added the hygieneEventRecord resource. Added the informationBarrierPolicyApplicationAuditRecord resource. Added the informationWorkerProtectionAuditRecord resource. Added the insiderRiskScopedUserInsightsRecord resource. Added the insiderRiskScopedUsersRecord resource. Added the integratedAppsAppAdminActivityAuditRecord resource. Added the integratedAppsAppSettingsAdminActivityAuditRecord resource. Added the irmActivityAuditTrailRecord resource. Added the irmUserDefinedDetectionRecord resource. Added the kaizalaAuditRecord resource. Added the labelAnalyticsAggregateAuditRecord resource. Added the labelContentExplorerAuditRecord resource. Added the largeContentMetadataAuditRecord resource. Added the m365ComplianceConnectorAuditRecord resource. Added the m365SearchSectionsRecord resource. Added the m365daadAuditRecord resource. Added the m365odspAssetMetadataRecord resource. Added the mailSubmissionData resource. Added the managedServicesAuditRecord resource. Added the managedTenantsAuditRecord resource. Added the mapgAlertsAuditRecord resource. Added the mapgOnboardAuditRecord resource. Added the mapgPolicyAuditRecord resource. Added the mapgRemediationAuditRecord resource. Added the mcasAlertsAuditRecord resource. Added the mdaAuditRecord resource. Added the mdaDataSecuritySignalRecord resource. Added the mdatpAuditRecord resource. Added the mdcEventsRecord resource. Added the mdiAuditRecord resource. Added the meshWorldsAuditRecord resource. Added the microsoft365BackupBackupItemAuditRecord resource. Added the microsoft365BackupBackupPolicyAuditRecord resource. Added the microsoft365BackupGranularBrowseTaskAuditRecord resource. Added the microsoft365BackupRestoreItemAuditRecord resource. Added the microsoft365BackupRestoreTaskAuditRecord resource. Added the microsoft365CopilotScheduledPromptAuditRecord resource. Added the microsoftDefenderExpertsXDRAuditRecord resource. Added the microsoftFlowAuditRecord resource. Added the microsoftFormsAuditRecord resource. Added the microsoftGraphDataConnectConsent resource. Added the microsoftGraphDataConnectOperation resource. Added the microsoftPurviewDataCatalogOperationRecord resource. Added the microsoftPurviewDataMapOperationRecord resource. Added the microsoftPurviewMetadataPolicyOperationRecord resource. Added the microsoftPurviewPolicyOperationRecord resource. Added the microsoftPurviewPrivacyAuditEvent resource. Added the microsoftPurviewUnifiedCatalogOperationRecord resource. Added the microsoftStreamAuditRecord resource. Added the microsoftTeamsAdminAuditRecord resource. Added the microsoftTeamsAnalyticsAuditRecord resource. Added the microsoftTeamsAuditRecord resource. Added the microsoftTeamsDeviceAuditRecord resource. Added the microsoftTeamsRetentionLabelActionAuditRecord resource. Added the microsoftTeamsSensitivityLabelActionAuditRecord resource. Added the microsoftTeamsShiftsAuditRecord resource. Added the mipAutoLabelExchangeItemAuditRecord resource. Added the mipAutoLabelProgressFeedbackAuditRecord resource. Added the mipAutoLabelSharePointItemAuditRecord resource. Added the mipAutoLabelSharePointPolicyLocationAuditRecord resource. Added the mipAutoLabelSimulationSharePointCompletionRecord resource. Added the mipAutoLabelSimulationSharePointProgressRecord resource. Added the mipAutoLabelSimulationStatisticsRecord resource. Added the mipExactDataMatchAuditRecord resource. Added the mipLabelAnalyticsAuditRecord resource. Added the mipLabelAuditRecord resource. Added the mosAgentInfoRecord resource. Added the ms365dCustomDetectionAuditRecord resource. Added the ms365dIncidentAuditRecord resource. Added the ms365dSuppressionRuleAuditRecord resource. Added the msdeCustomCollectionAuditRecord resource. Added the msdeGeneralSettingsAuditRecord resource. Added the msdeIndicatorsSettingsAuditRecord resource. Added the msdeResponseActionsAuditRecord resource. Added the msdeRolesSettingsAuditRecord resource. Added the msticNationStateNotificationRecord resource. Added the multiStageDispositionAuditRecord resource. Added the myAnalyticsSettingsAuditRecord resource. Added the noisyAlertPolicyAuditRecord resource. Added the officeNativeAuditRecord resource. Added the omePortalAuditRecord resource. Added the onDemandSharePointClassificationAuditRecord resource. Added the onPremisesFileShareScannerDLPAuditRecord resource. Added the onPremisesSharePointScannerDLPAuditRecord resource. Added the oneDriveAuditRecord resource. Added the organizationalDataInM365AuditRecord resource. Added the outlookCopilotAutomationAuditRecord resource. Added the owaGetAccessTokenForResourceAuditRecord resource. Added the p4aiAssessmentCategoryRecord resource. Added the p4aiAssessmentFabricScannerRecord resource. Added the p4aiAssessmentLocationResultRecord resource. Added the p4aiAssessmentRecord resource. Added the peopleAdminSettingsAuditRecord resource. Added the physicalBadgingSignalAuditRecord resource. Added the placesDirectoryAuditRecord resource. Added the plannerChatMessageAuditRecord resource. Added the plannerChatMessageListAuditRecord resource. Added the plannerCopyPlanAuditRecord resource. Added the plannerGoalAuditRecord resource. Added the plannerGoalListAuditRecord resource. Added the plannerPlanAuditRecord resource. Added the plannerPlanListAuditRecord resource. Added the plannerPlanSensitivityLabelAuditRecord resource. Added the plannerRosterAuditRecord resource. Added the plannerRosterSensitivityLabelAuditRecord resource. Added the plannerTaskAuditRecord resource. Added the plannerTaskListAuditRecord resource. Added the plannerTenantSettingsAuditRecord resource. Added the policyConfigChangeAuditRecord resource. Added the powerAppsAuditAppRecord resource. Added the powerAppsAuditPlanRecord resource. Added the powerAppsAuditResourceRecord resource. Added the powerBIAuditRecord resource. Added the powerBIDlpAuditRecord resource. Added the powerPagesSiteAuditRecord resource. Added the powerPlatformAdminDlpAuditRecord resource. Added the powerPlatformAdminEnvironmentAuditRecord resource. Added the powerPlatformAdministratorActivityRecord resource. Added the powerPlatformLockboxResourceAccessRequestAuditRecord resource. Added the powerPlatformLockboxResourceCommandAuditRecord resource. Added the powerPlatformServiceActivityAuditRecord resource. Added the powerPlatformTenantIsolationRecord resource. Added the privaPrivacyAssessmentOperationRecord resource. Added the privaPrivacyConsentOperationRecord resource. Added the privacyDataMatchAuditRecord resource. Added the privacyDataMinimizationRecord resource. Added the privacyDigestEmailRecord resource. Added the privacyOpenAccessAuditRecord resource. Added the privacyPortalAuditRecord resource. Added the privacyRemediationActionRecord resource. Added the privacyRemediationRecord resource. Added the projectAuditRecord resource. Added the projectForTheWebAssignedToMeSettingsAuditRecord resource. Added the projectForTheWebProjectAuditRecord resource. Added the projectForTheWebProjectSettingsAuditRecord resource. Added the projectForTheWebRoadmapAuditRecord resource. Added the projectForTheWebRoadmapItemAuditRecord resource. Added the projectForTheWebRoadmapSettingsAuditRecord resource. Added the projectForTheWebTaskAuditRecord resource. Added the publicFolderAuditRecord resource. Added the purviewInsiderRiskAlertsRecord resource. Added the purviewInsiderRiskCasesRecord resource. Added the purviewMCRecommendationRecord resource. Added the purviewPostureAgentAuditRecord resource. Added the quarantineAuditRecord resource. Added the recordsManagementAuditRecord resource. Added the reportSubmission resource. Added the reportSubmissionResultDetail resource. Added the restrictedModeAuditRecord resource. Added the retentionPolicyAuditRecord resource. Added the rtiOperationsAgentAuditRecord resource. Added the sbpConfigurationEventRecord resource. Added the sbpUsageEventRecord resource. Added the scoreEvidence resource. Added the scorePlatformGenericAuditRecord resource. Added the scriptRunAuditRecord resource. Added the searchAuditRecord resource. Added the securityComplianceAlertRecord resource. Added the securityComplianceCenterEOPCmdletAuditRecord resource. Added the securityComplianceInsightsAuditRecord resource. Added the securityComplianceRBACAuditRecord resource. Added the securityComplianceUserChangeAuditRecord resource. Added the sensitiveInfoRemediationAgentDataRecord resource. Added the sensitivityLabelActionAuditRecord resource. Added the sensitivityLabelPolicyMatchAuditRecord resource. Added the sensitivityLabeledFileActionAuditRecord resource. Added the sentinelAIToolAuditRecord resource. Added the sentinelGraphAuditRecord resource. Added the sentinelJobAuditRecord resource. Added the sentinelKQLOnLakeAuditRecord resource. Added the sentinelLakeDataOnboardingAuditRecord resource. Added the sentinelLakeEncryptionAuditRecord resource. Added the sentinelLakeOnboardingAuditRecord resource. Added the sentinelNotebookOnLakeAuditRecord resource. Added the sentinelPackageAuditRecord resource. Added the sharePointAppPermissionOperationAuditRecord resource. Added the sharePointAuditRecord resource. Added the sharePointCommentOperationAuditRecord resource. Added the sharePointContentSecurityPolicyAuditRecord resource. Added the sharePointContentTypeOperationAuditRecord resource. Added the sharePointESignatureAuditRecord resource. Added the sharePointFieldOperationAuditRecord resource. Added the sharePointFileOperationAuditRecord resource. Added the sharePointListItemOperationAuditRecord resource. Added the sharePointListOperationAuditRecord resource. Added the sharePointSharingOperationAuditRecord resource. Added the skypeForBusinessCmdletsAuditRecord resource. Added the skypeForBusinessPSTNUsageAuditRecord resource. Added the skypeForBusinessUsersBlockedAuditRecord resource. Added the sonarDetonationContentMetadata resource. Added the supervisoryReviewDayXInsightsAuditRecord resource. Added the syntheticProbeAuditRecord resource. Added the teamCopilotInteractionAuditRecord resource. Added the teamsEasyApprovalsAuditRecord resource. Added the teamsEvalDataHubAdminOperationAuditRecord resource. Added the teamsEvalDataHubDataAccessAuditRecord resource. Added the teamsEvalDataHubPermissionChangeAuditRecord resource. Added the teamsHealthcareAuditRecord resource. Added the teamsUpdatesAuditRecord resource. Added the tenantAllowBlockListAuditRecord resource. Added the threatFinderAuditRecord resource. Added the threatIntelligenceAtpContentData resource. Added the threatIntelligenceExportAuditRecord resource. Added the threatIntelligenceMailData resource. Added the threatIntelligenceObjectAuditRecord resource. Added the threatIntelligenceUrlClickData resource. Added the todoAuditRecord resource. Added the trainableClassifierAuditRecord resource. Added the uamOperationAuditRecord resource. Added the unifiedGroupAuditRecord resource. Added the unifiedSimulationMatchedItemAuditRecord resource. Added the unifiedSimulationSummaryAuditRecord resource. Added the universalPrintManagementAuditRecord resource. Added the universalPrintPrintJobAuditRecord resource. Added the urbacAssignmentAuditRecord resource. Added the urbacEnableStateAuditRecord resource. Added the urbacRoleAuditRecord resource. Added the userTrainingAuditRecord resource. Added the usxWorkspaceOnboardingAuditRecord resource. Added the vfamCreatePolicyAuditRecord resource. Added the vfamDeletePolicyAuditRecord resource. Added the vfamUpdatePolicyAuditRecord resource. Added the vivaAmplifyAuditRecord resource. Added the vivaEngageEventsAuditRecord resource. Added the vivaEngageNetworkAssociationAuditRecord resource. Added the vivaEngageSegmentAuditRecord resource. Added the vivaGlintAdvancedConfigurationAuditRecord resource. Added the vivaGlintFeedbackProgramAuditRecord resource. Added the vivaGlintOrganizationalDataAuditRecord resource. Added the vivaGlintPulseProgramAuditRecord resource. Added the vivaGlintPulseProgramRespondentRateAuditRecord resource. Added the vivaGlintQuestionAuditRecord resource. Added the vivaGlintRoleAuditRecord resource. Added the vivaGlintRubiconAuditRecord resource. Added the vivaGlintSupportAccessAuditRecord resource. Added the vivaGlintSystemAuditRecord resource. Added the vivaGlintUserAuditRecord resource. Added the vivaGlintUserGroupAuditRecord resource. Added the vivaGoalsAuditRecord resource. Added the vivaLearningAdminAuditRecord resource. Added the vivaLearningAuditRecord resource. Added the vivaPulseAdminAuditRecord resource. Added the vivaPulseOrganizerAuditRecord resource. Added the vivaPulseReportAuditRecord resource. Added the vivaPulseResponseAuditRecord resource. Added the wdatpAlertsAuditRecord resource. Added the webContentFilteringAuditRecord resource. Added the windows365CustomerLockboxAuditRecord resource. Added the workplaceAnalyticsAuditRecord resource. Added the yammerAuditRecord resource. Added the yammerUserHidingAuditRecord resource. Added the auditCoreRoot resource. Added the auditLog relationship to the security resource. Added the auditLogQueryStatus enumeration type with members: notStarted, running, succeeded, failed, cancelled, unknownFutureValue. Added the auditLogUserType enumeration type with members: Regular, Reserved, Admin, DcAdmin, System, Application, ServicePrincipal, CustomPolicy, SystemPolicy, PartnerTechnician, Guest, unknownFutureValue. Added the auditLogRecordType enumeration type.
What it said
- API version
- v1.0
- Area
- Security
- Kind
- Announcement
- Date precision
- Day
- Published
- 2026-06-17T00:00:00.0000000+00:00
- Compatibility guidance
- Removal or breaking change mentioned
- Schedule guidance
- Not labelled
Recorded links
- Microsoft announcement
- aISpanOutputsAuditRecord
- alertSubmissionAuditRecord
- alertSubmissionResultDetailAuditRecord
- auditData
- auditRecordTypeDictionary
- azureAISearchAuditRecord
- compliancePolicyGradingSharePointAuditRecord
- complianceSitGradingSharePointAuditRecord
- copilotSessionSharingAuditRecord
- eopSubmissionFeedEntityAuditRecord
- fabricPolicyRecord
- microsoftTeamsUserConcernAuditRecord
- mspVectorSearchContentMetadataAuditRecord
- p4AIRiskScoreRecord
- securityCopilotIdentityManagementAuditRecord
- sonarDetonationEntityAuditRecord
- sonarFileDetonationEntityAuditRecord
- sonarSubmissionEntityAuditRecord
- sonarUrlDetonationEntityAuditRecord
- submissionEntityAuditRecord
- vivaGlintAgenticCampaignAuditRecord
- mosAgentInfoRecordV2
- securityDevelopmentLifecycleAILogAuditRecord
- mDASHAuditRecord
- defenderSecurityForAIConfigurationAuditRecord
- sparkCoreCustomLivePoolRecord
- dragonCopilotAccessRecord
- dragonCopilotAdminRecord
- dragonCopilotClinicalDataRecord
- dragonCopilotSessionRecord
- a365AiExecuteTool
- a365AiInferenceCall
- a365AiInvokeAgent
- a365AiRunSummary
- a365SpanOutputs
- aadRiskDetectionAuditRecord
- aedAuditRecord
- agentAdminActivityRecord
- agentSettingAdminActivity
- aiAppInteractionAuditRecord
- aiExecuteToolAuditRecord
- aiInteractionsChangeNotificationAuditRecord
- aiInteractionsExportAuditRecord
- aiInteractionsSubscriptionAuditRecord
- aiInvokeAgentAuditRecord
- aipDiscover
- aipFileDeleted
- aipHeartBeat
- aipProtectionActionLogRequest
- aipScannerDiscoverEvent
- aipSensitivityLabelActionLogRequest
- airAdminActionInvestigationData
- airInvestigationData
- airManualInvestigationData
- attackSimAdminAuditRecord
- attackSimAuditRecord
- auditConfigAuditRecord
- auditSearchAuditRecord
- azfwApplicationRuleAggregationEventRecord
- azfwDnsQueryEventRecord
- azfwNetworkRuleEventRecord
- azureActiveDirectoryAccountLogonAuditRecord
- azureActiveDirectoryAuditRecord
- azureActiveDirectoryStsLogonAuditRecord
- campaignAuditRecord
- ccraiPolicyViolationRecord
- cdpClassifierHealthRecord
- cdpColdCrawlStatusRecord
- cdpConsumptionResourceRecord
- cdpContentExplorerAggregateRecord
- cdpDlpSensitiveEndpointAuditRecord
- cdpLogRecord
- cdpOcrBillingRecord
- cdpResourceScopeChangeEventRecord
- cdpdlmaiInteractionInsightsRecord
- cloudUpdateDeviceConfigAuditRecord
- cloudUpdateProfileConfigAuditRecord
- cloudUpdateTenantConfigAuditRecord
- complianceConnectorAuditRecord
- complianceDLMExchangeAuditRecord
- complianceDLMSharePointAuditRecord
- complianceDLPApplicationsAuditRecord
- complianceDLPApplicationsClassificationAuditRecord
- complianceDLPEndpointAuditRecord
- complianceDLPEndpointDiscoveryAuditRecord
- complianceDLPEnforcementAuditRecord
- complianceDLPExchangeAuditRecord
- complianceDLPExchangeClassificationAuditRecord
- complianceDLPExchangeClassificationCdpRecord
- complianceDLPExchangeDiscoveryAuditRecord
- complianceDLPSharePointAuditRecord
- complianceDLPSharePointClassificationAuditRecord
- complianceDLPSharePointClassificationCdpRecord
- complianceDLPSharePointClassificationExtendedAuditRecord
- complianceExchangeOcrAuditRecord
- complianceManagerActionRecord
- complianceSettingsChangeAuditRecord
- complianceSupervisionExchangeAuditRecord
- connectedAIAppInteractionAuditRecord
- consumptionResourceAuditRecord
- contentStoreMetadataRecord
- copilotAgentManagementAuditRecord
- copilotForSecurityLoggingAuditRecord
- copilotForSecurityTriggerAuditRecord
- copilotInteractionAuditRecord
- copilotPluginSettingAuditRecord
- copilotPromptBookSettingAuditRecord
- copilotSettingAuditRecord
- copilotWorkspaceSettingAuditRecord
- coreReportingSettingsAuditRecord
- cortanaBriefingAuditRecord
- criticalAssetManagementClassificationRecord
- crmEntityOperationAuditRecord
- crossTenantAccessPolicyAuditRecord
- customerKeyServiceEncryptionAuditRecord
- dataCenterSecurityCmdletAuditRecord
- dataGovernanceAuditRecord
- dataInsightsRestApiAuditRecord
- dataLakeExportOperationAuditRecord
- dataSecurityInvestigationAuditRecord
- dataShareOperationAuditRecord
- defenderCaseManagementAuditRecord
- defenderPreviewFeaturesRecord
- deployFeatureActivityRecord
- deviceDiscoverySettingsAuthenticatedScansRecord
- deviceDiscoverySettingsExclusionRecord
- deviceDiscoverySettingsRecord
- discoveryAuditRecord
- dlpEndpointAuditRecord
- dlpImportResultAuditRecord
- dlpSensitiveInformationTypeRulePackageCmdletRecord
- dynamics365BusinessCentralAuditRecord
- ehrConnectorAuditBaseRecord
- exchangeAdminAuditRecord
- exchangeAggregatedMailboxAuditRecord
- exchangeAggregatedOperationRecord
- exchangeMailboxAuditGroupRecord
- exchangeMailboxAuditRecord
- fabricAuditRecord
- healthcareSignalRecord
- hostedRpaAuditRecord
- hrSignalAuditRecord
- hygieneEventRecord
- informationBarrierPolicyApplicationAuditRecord
- informationWorkerProtectionAuditRecord
- insiderRiskScopedUserInsightsRecord
- insiderRiskScopedUsersRecord
- integratedAppsAppAdminActivityAuditRecord
- integratedAppsAppSettingsAdminActivityAuditRecord
- irmActivityAuditTrailRecord
- irmUserDefinedDetectionRecord
- kaizalaAuditRecord
- labelAnalyticsAggregateAuditRecord
- labelContentExplorerAuditRecord
- largeContentMetadataAuditRecord
- m365ComplianceConnectorAuditRecord
- m365SearchSectionsRecord
- m365daadAuditRecord
- m365odspAssetMetadataRecord
- mailSubmissionData
- managedServicesAuditRecord
- managedTenantsAuditRecord
- mapgAlertsAuditRecord
- mapgOnboardAuditRecord
- mapgPolicyAuditRecord
- mapgRemediationAuditRecord
- mcasAlertsAuditRecord
- mdaAuditRecord
- mdaDataSecuritySignalRecord
- mdatpAuditRecord
- mdcEventsRecord
- mdiAuditRecord
- meshWorldsAuditRecord
- microsoft365BackupBackupItemAuditRecord
- microsoft365BackupBackupPolicyAuditRecord
- microsoft365BackupGranularBrowseTaskAuditRecord
- microsoft365BackupRestoreItemAuditRecord
- microsoft365BackupRestoreTaskAuditRecord
- microsoft365CopilotScheduledPromptAuditRecord
- microsoftDefenderExpertsXDRAuditRecord
- microsoftFlowAuditRecord
- microsoftFormsAuditRecord
- microsoftGraphDataConnectConsent
- microsoftGraphDataConnectOperation
- microsoftPurviewDataCatalogOperationRecord
- microsoftPurviewDataMapOperationRecord
- microsoftPurviewMetadataPolicyOperationRecord
- microsoftPurviewPolicyOperationRecord
- microsoftPurviewPrivacyAuditEvent
- microsoftPurviewUnifiedCatalogOperationRecord
- microsoftStreamAuditRecord
- microsoftTeamsAdminAuditRecord
- microsoftTeamsAnalyticsAuditRecord
- microsoftTeamsAuditRecord
- microsoftTeamsDeviceAuditRecord
- microsoftTeamsRetentionLabelActionAuditRecord
- microsoftTeamsSensitivityLabelActionAuditRecord
- microsoftTeamsShiftsAuditRecord
- mipAutoLabelExchangeItemAuditRecord
- mipAutoLabelProgressFeedbackAuditRecord
- mipAutoLabelSharePointItemAuditRecord
- mipAutoLabelSharePointPolicyLocationAuditRecord
- mipAutoLabelSimulationSharePointCompletionRecord
- mipAutoLabelSimulationSharePointProgressRecord
- mipAutoLabelSimulationStatisticsRecord
- mipExactDataMatchAuditRecord
- mipLabelAnalyticsAuditRecord
- mipLabelAuditRecord
- mosAgentInfoRecord
- ms365dCustomDetectionAuditRecord
- ms365dIncidentAuditRecord
- ms365dSuppressionRuleAuditRecord
- msdeCustomCollectionAuditRecord
- msdeGeneralSettingsAuditRecord
- msdeIndicatorsSettingsAuditRecord
- msdeResponseActionsAuditRecord
- msdeRolesSettingsAuditRecord
- msticNationStateNotificationRecord
- multiStageDispositionAuditRecord
- myAnalyticsSettingsAuditRecord
- noisyAlertPolicyAuditRecord
- officeNativeAuditRecord
- omePortalAuditRecord
- onDemandSharePointClassificationAuditRecord
- onPremisesFileShareScannerDLPAuditRecord
- onPremisesSharePointScannerDLPAuditRecord
- oneDriveAuditRecord
- organizationalDataInM365AuditRecord
- outlookCopilotAutomationAuditRecord
- owaGetAccessTokenForResourceAuditRecord
- p4aiAssessmentCategoryRecord
- p4aiAssessmentFabricScannerRecord
- p4aiAssessmentLocationResultRecord
- p4aiAssessmentRecord
- peopleAdminSettingsAuditRecord
- physicalBadgingSignalAuditRecord
- placesDirectoryAuditRecord
- plannerChatMessageAuditRecord
- plannerChatMessageListAuditRecord
- plannerCopyPlanAuditRecord
- plannerGoalAuditRecord
- plannerGoalListAuditRecord
- plannerPlanAuditRecord
- plannerPlanListAuditRecord
- plannerPlanSensitivityLabelAuditRecord
- plannerRosterAuditRecord
- plannerRosterSensitivityLabelAuditRecord
- plannerTaskAuditRecord
- plannerTaskListAuditRecord
- plannerTenantSettingsAuditRecord
- policyConfigChangeAuditRecord
- powerAppsAuditAppRecord
- powerAppsAuditPlanRecord
- powerAppsAuditResourceRecord
- powerBIAuditRecord
- powerBIDlpAuditRecord
- powerPagesSiteAuditRecord
- powerPlatformAdminDlpAuditRecord
- powerPlatformAdminEnvironmentAuditRecord
- powerPlatformAdministratorActivityRecord
- powerPlatformLockboxResourceAccessRequestAuditRecord
- powerPlatformLockboxResourceCommandAuditRecord
- powerPlatformServiceActivityAuditRecord
- powerPlatformTenantIsolationRecord
- privaPrivacyAssessmentOperationRecord
- privaPrivacyConsentOperationRecord
- privacyDataMatchAuditRecord
- privacyDataMinimizationRecord
- privacyDigestEmailRecord
- privacyOpenAccessAuditRecord
- privacyPortalAuditRecord
- privacyRemediationActionRecord
- privacyRemediationRecord
- projectAuditRecord
- projectForTheWebAssignedToMeSettingsAuditRecord
- projectForTheWebProjectAuditRecord
- projectForTheWebProjectSettingsAuditRecord
- projectForTheWebRoadmapAuditRecord
- projectForTheWebRoadmapItemAuditRecord
- projectForTheWebRoadmapSettingsAuditRecord
- projectForTheWebTaskAuditRecord
- publicFolderAuditRecord
- purviewInsiderRiskAlertsRecord
- purviewInsiderRiskCasesRecord
- purviewMCRecommendationRecord
- purviewPostureAgentAuditRecord
- quarantineAuditRecord
- recordsManagementAuditRecord
- reportSubmission
- reportSubmissionResultDetail
- restrictedModeAuditRecord
- retentionPolicyAuditRecord
- rtiOperationsAgentAuditRecord
- sbpConfigurationEventRecord
- sbpUsageEventRecord
- scoreEvidence
- scorePlatformGenericAuditRecord
- scriptRunAuditRecord
- searchAuditRecord
- securityComplianceAlertRecord
- securityComplianceCenterEOPCmdletAuditRecord
- securityComplianceInsightsAuditRecord
- securityComplianceRBACAuditRecord
- securityComplianceUserChangeAuditRecord
- sensitiveInfoRemediationAgentDataRecord
- sensitivityLabelActionAuditRecord
- sensitivityLabelPolicyMatchAuditRecord
- sensitivityLabeledFileActionAuditRecord
- sentinelAIToolAuditRecord
- sentinelGraphAuditRecord
- sentinelJobAuditRecord
- sentinelKQLOnLakeAuditRecord
- sentinelLakeDataOnboardingAuditRecord
- sentinelLakeEncryptionAuditRecord
- sentinelLakeOnboardingAuditRecord
- sentinelNotebookOnLakeAuditRecord
- sentinelPackageAuditRecord
- sharePointAppPermissionOperationAuditRecord
- sharePointAuditRecord
- sharePointCommentOperationAuditRecord
- sharePointContentSecurityPolicyAuditRecord
- sharePointContentTypeOperationAuditRecord
- sharePointESignatureAuditRecord
- sharePointFieldOperationAuditRecord
- sharePointFileOperationAuditRecord
- sharePointListItemOperationAuditRecord
- sharePointListOperationAuditRecord
- sharePointSharingOperationAuditRecord
- skypeForBusinessCmdletsAuditRecord
- skypeForBusinessPSTNUsageAuditRecord
- skypeForBusinessUsersBlockedAuditRecord
- sonarDetonationContentMetadata
- supervisoryReviewDayXInsightsAuditRecord
- syntheticProbeAuditRecord
- teamCopilotInteractionAuditRecord
- teamsEasyApprovalsAuditRecord
- teamsEvalDataHubAdminOperationAuditRecord
- teamsEvalDataHubDataAccessAuditRecord
- teamsEvalDataHubPermissionChangeAuditRecord
- teamsHealthcareAuditRecord
- teamsUpdatesAuditRecord
- tenantAllowBlockListAuditRecord
- threatFinderAuditRecord
- threatIntelligenceAtpContentData
- threatIntelligenceExportAuditRecord
- threatIntelligenceMailData
- threatIntelligenceObjectAuditRecord
- threatIntelligenceUrlClickData
- todoAuditRecord
- trainableClassifierAuditRecord
- uamOperationAuditRecord
- unifiedGroupAuditRecord
- unifiedSimulationMatchedItemAuditRecord
- unifiedSimulationSummaryAuditRecord
- universalPrintManagementAuditRecord
- universalPrintPrintJobAuditRecord
- urbacAssignmentAuditRecord
- urbacEnableStateAuditRecord
- urbacRoleAuditRecord
- userTrainingAuditRecord
- usxWorkspaceOnboardingAuditRecord
- vfamCreatePolicyAuditRecord
- vfamDeletePolicyAuditRecord
- vfamUpdatePolicyAuditRecord
- vivaAmplifyAuditRecord
- vivaEngageEventsAuditRecord
- vivaEngageNetworkAssociationAuditRecord
- vivaEngageSegmentAuditRecord
- vivaGlintAdvancedConfigurationAuditRecord
- vivaGlintFeedbackProgramAuditRecord
- vivaGlintOrganizationalDataAuditRecord
- vivaGlintPulseProgramAuditRecord
- vivaGlintPulseProgramRespondentRateAuditRecord
- vivaGlintQuestionAuditRecord
- vivaGlintRoleAuditRecord
- vivaGlintRubiconAuditRecord
- vivaGlintSupportAccessAuditRecord
- vivaGlintSystemAuditRecord
- vivaGlintUserAuditRecord
- vivaGlintUserGroupAuditRecord
- vivaGoalsAuditRecord
- vivaLearningAdminAuditRecord
- vivaLearningAuditRecord
- vivaPulseAdminAuditRecord
- vivaPulseOrganizerAuditRecord
- vivaPulseReportAuditRecord
- vivaPulseResponseAuditRecord
- wdatpAlertsAuditRecord
- webContentFilteringAuditRecord
- windows365CustomerLockboxAuditRecord
- workplaceAnalyticsAuditRecord
- yammerAuditRecord
- yammerUserHidingAuditRecord
- security
Source evidence when recorded
- graph-changelog
- Complete at observationRead 26 Oct 2026 at 06:23 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 26 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.