Tony Redmond @office365itpros.com · Nov 20 And here's an example of the output showing details of users who have downgraded or removed sensitivity labels. The idea is that if you see someone who's removed or downgraded hundreds of labels, they might be doing something suspicious...
1 likes 1 replies
?
Replies
Great script, thanks for sharing 😀. There is also a AuditData.SensitivityLabelEventData.LabelEventType field which is pretty interesting. Afaik that can have numeric values like 1 (Label Upgraded), 2 (Label Downgraded) and 3 (Label Removed) which I found pretty useful in the past.