Microsoft Purview Audit

Customized Retention Policies: Customized retention policies allow administrators to define specific retention periods for different types of audit data, ensuring compliance with various regulatory requirements and internal policies.

Granular Retention Control: Microsoft Purview Audit (Premium) allows administrators to define specific retention periods for different types of audit data based on various criteria such as the service where the audited activities occur, the specific activities performed, or the users involved, enabling flexible and granular control over audit log retention.

Intelligent Insights: Microsoft Purview Audit (Premium) leverages intelligent insights and analytics to identify suspicious or anomalous activities within audit logs, helping organizations proactively detect potential security threats and compliance violations. This may include unusual login patterns, data access anomalies, or administrative actions that deviate from established norms.

Higher Bandwidth to Office 365 Management Activity API: Microsoft Purview Audit (Premium) provides higher bandwidth to the Office 365 Management Activity API, allowing organizations to retrieve audit data more quickly and efficiently, particularly during large-scale investigations or when dealing with high volumes of audit logs.

Customized Retention Policies: With Customized retention policies, you can create rules to retain audit logs for specific periods, ensuring that critical data is preserved for the necessary duration for compliance or investigation purposes.

Intelligent Insights and Anomaly Detection: Microsoft Purview Audit (Premium) uses intelligent insights and machine learning to analyze audit logs and identify suspicious or anomalous activities, helping security teams proactively detect and respond to potential threats or compliance violations. This feature can detect patterns such as unusual login locations, data access anomalies, or administrative actions that deviate from established baselines.

High-Bandwidth Access to Audit API: Microsoft Purview Audit (Premium) provides dedicated and higher bandwidth access to the Office 365 Management Activity API. This enhanced bandwidth allocation enables organizations to retrieve audit data more efficiently and rapidly, which is essential for conducting timely investigations, especially when dealing with large volumes of audit logs or during critical security incidents.