Enable Audit Log Search
Enable Mailbox Auditing for All Users
Review Role Changes Weekly
Review Mailbox Forwarding Rules Weekly
Review the Mailbox Access by Non-Owners Report Bi-Weekly
Review the Malware Detections Report Weekly
Review your Account Provisioning Activity Report Weekly
Additional Resources
- https://usc.pax8.com/resource/display/33588
- https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults