This website uses cookies to improve your experience. We'll assume you're ok with this. Know more.

OneDrive Auditing

Considering OneDrive is crucial in file sharing and collaboration, admins have to maintain a record of every file access and modification to ensure data security. AdminDroid offers complete statistics on real-time OneDrive activities that happened in the organization. With these reports, admins can gain insights into the file traffic trends and how the files are being shared via company links and anonymous links.

Microsoft OneDrive Auditing

OneDrive File Activity Logs

Onedrive File Activities

As few OneDrive files may contain sensitive information, users may share it accidentally with other users/guests. Thus, having an accurate interpretation of OneDrive activity is crucial for admins.

With AdminDroid, you are provided with a bird’s eye view of complete OneDrive file activities to ensure security and prevent breaches.

Track the real-time OneDrive file activities, such as accessed files, modified files, and uploaded files. Under file activities, obtain detailed reports on downloaded files, renamed files, copied files, moved files, and restored files.

Accessed Files

From this report, admins can find a list of OneDrive file access history in the organization. Admins can identify when suspicious users access confidential files, thereby preventing data leakage. This report provides details about when the file was accessed, accessed file, accessed user, OneDrive site URL, etc.

Modified Files

Through this report, admins can get notified whenever OneDrive files are modified, by opting for alerts. This report lists the details of modified files such as who modified the OneDrive file, modified time, OneDrive URL, file extension, etc. Admins can verify the most frequently used file types in OneDrive, such as PDF, PPT, PPTX, RTF, DOC, DOCX, etc.

Uploaded Files

A list of OneDrive files that got uploaded is available in this report. Any suspicious bulk uploads of OneDrive files in the organization can get checked by the admins. With the help of this report, admins can obtain detailed stats on uploaded time, uploaded files, uploaded by, OneDrive site URL, file extension, and more.

Renamed Files

Office 365 renamed files in OneDrive for Business are available in this report. It provides the details of who renamed the file, renamed files, file names before/after renaming, file URL, and more. With automatic renaming enabled, invalid characters are replaced with an underscore which can get checked using this report.

Copied Files

Admins can manage copied files between OneDrive sites and SharePoint sites at ease using this report. OneDrive files which got copied in the organization are available in this report. Further, the details of copied time, the file name in source/destination, username, file URL, etc., are obtained.

Moved Files

Admins can obtain a list of moved OneDrive files with information like moving time, source file name, source relative URL, destination relative URL, user name, file URL, and so on. Admins can classify the files that got moved from SharePoint to OneDrive and manage them accordingly using this report.

Deleted Files

A list of deleted OneDrive files in the Microsoft 365 environment is available here. Details like deleted time, deleted files, username, and deleted items URLs are also obtained. If required, admins can recover the deleted OneDrive files in the organization using this report.

Restored Files

In this report, admins can find a list of restored files in the organization. Further, admins are provided with detailed stats like restored time, restored file, user name, restored item URL, and deleted file. Admins can find the list of restored files that got accidentally deleted, overwritten, corrupted, etc.

All Activities

All activities related to the OneDrive file that happened in the organization are listed in this report. Using this report, admins can find detailed info on OneDrive activity, activity time, user name, target, file extension, etc.

OneDrive Folder Activities

There are times when, instead of performing activities in files, it will apply to folders resulting in accidental sharing, bulk deletion, moving, etc. Also, with more users using OneDrive, it becomes increasingly difficult for admins to keep track of file and folder activities proportionally.

AdminDroid offers an exclusive set of reports on OneDrive folder activities that ease managing folder and file activity.

This is where admins will find the recently created, deleted, copied, renamed, and modified folders in OneDrive for business. Furthermore, details on each folder that has been copied, renamed, moved, or deleted are obtained.

Onedrive Folder Activities

Deleted Folders

A list of deleted OneDrive folders in the Microsoft 365 environment is available in this report. Admins can use this report to restore the deleted folder if it got deleted unintentionally. Also, details like deleted time, deleted files, and deleted items URLs are obtained.

Moved Folders

Admins can easily attain the details of folders moved from OneDrive to SharePoint using this report. Admins can obtain a list of moved OneDrive folders with information like moved time, moved folder, original location, moved location, and so on.

Created Folders

Without the need for complicated PS cmdlets, admins can retrieve info on Office 365 OneDrive folder creations using this report. It lists the OneDrive folders that got created in the organization. Admins can find details such as created time, folder name, created by, created path, and more.

Modified Folders

This report lists the details of the modified folder with the info on modified time, modified file, username, modified folder URL, etc. During investigations, admins can check this report to verify the recently modified folder and take action accordingly.

Renamed Folders

Renaming folders intentionally that contain sensitive files will cause confusion and undesired consequences. From this report, admins can acquire the complete info on renamed folders in OneDrive for Business. Admins can also obtain the details of renamed folders, folder names before/after renaming, and more.

Copied Folders

OneDrive folders which got copied in the organization are available in this report. It may happen that instead of copying a file, the entire folder can get copied, which can be monitored by this report. Admins can also monitor unwanted copying of OneDrive folder and take required actions by obtaining the details of copied time, copied folder, source/destination location, folder URL, etc.

Restored Folders

Admins should get alerted when a deleted folder gets restored. A list of restored OneDrive folders that got deleted or modified is found in this report. Further, admins are provided with detailed stats like restored time, restored folder, restored item URL, restored location, etc.

All Activities

All activities related to the OneDrive folder that happened in the organization are listed in this report. Using this report, admins can find detailed info on performed activity, event time, username, target, file extension, etc.

OneDrive Company Links Sharing

OneDrive Company Links Sharing

As OneDrive serves as a collaborative tool, many company links will get created and shared, making it more difficult to keep track of them.

With AdminDroid, admins can keep track of all access and activity performed over company links.

This report allows admins to keep track of all newly created Office 365 OneDrive company links. Additionally, admins can find information on removed and accessed company links, as well as the company links related events.

Company Links Created

This report lists the OneDrive company links created in the organization. Admins can get detailed info on link creation time, created by, shared item URL, shared file, file type, etc. Using this report, admins will get to know if any company links for confidential files are created.

Company Links Removed

A list of company links removed from OneDrive is available in this report. Detailed information on link removal time, removed by, unshared file, and unshared item URL, is listed in this report. Admins can use this report to detect the broken links in an organization.

Access Using Links

A list of OneDrive resources getting accessed by OneDrive links in the organization is obtained with this report. This report includes detailed stats on access time, accessed user, accessed item URL, file type, etc.

All Events

All OneDrive events related to company links are listed in this report. Detailed info on event time, operation, file name, file type, and more are obtained from this report. With the help of this report, admins can get a complete overview of all the activities happening in OneDrive files.

OneDrive Anonymous Links Sharing

As anonymous links need no authorization, data shared using anonymous links should be carefully monitored.

AdminDroid allows you to audit external user activities in OneDrive to avoid data breaches.

Keep an eye out for newly created anonymous links in your Microsoft 365 environment to prevent unauthorized access. Admins can track the creation, deletion, updating, and access to anonymous links through this report.

OneDrive Anonymous links Sharing

Anonymous Links Created

A record of anonymous links created in OneDrive is listed in this report. This report provides detailed information about link creation time, shared URL item, shared file, file type, shared by, etc. Admins can verify this report to find out when an anonymous link for external file sharing has been created, as they can be set to expire within certain days.

Anonymous Links Removed

A list of anonymous links that are removed from OneDrive are listed in this report. The links that are shared anonymously with outsiders pose a high risk as they can get misused. Details such as link removal time, unshared item URL, unshared file, link removed by, etc., are also obtained.

Anonymous Links Updated

As unnecessary modification in anonymous links causes chaos, admins should keep an eye on it. This report lists the updated anonymous links in the office 365 environment. From this report, detailed stats such as link updated time, updated item URL, shared file, file type, updated details, updated user, and so on are obtained.

Anonymous Links Accessed

By viewing this report, admins can track the OneDrive activity of external users through anonymous links. A list of OneDrive resources accessed using anonymous links is available in this report. Also, they can find information about access time, accessed item URL, accessed file, file type, accessed user, user’s machine IP, user agent, and more.

All Events

All events related to anonymous links, such as creations, removals, modifications, and accesses, are listed together. This report lists detailed info on anonymous sharing such as event time, operation name, target item URL, file name, file type, performed user, etc.

Users Shares in OneDrive

OneDrive Users shares

Admins should regularly audit the OneDrive links that users share to make sure they aren't shared with the external network, where they can be misused.

AdminDroid offers insightful reports on OneDrive user sharing activities to keep your critical resources secure.

View all shared files and folders in OneDrive for Business using this report. In addition, admins can get details on the unshared files and folders on OneDrive.

Shared Items

Microsoft 365 users shared OneDrive files or folders are listed in this report. This report includes details on sharing time, share file name, shared to, shared by, etc. Also, admins can see what permissions each user has been granted to access the file/folder.

Unshared Items

A list of OneDrive unshared files or folders in the organization is available in the report. Admins can find the details of unsharing time, unshared file name, unshared from, unshared target type, unshared item URL, etc.

OneDrive Audit Dashboard

With AdminDroid, admins can figure out, “Which OneDrive file activity is trending in the organization now?”

Admins can find the list of activities that are trending across the organization. The view can also be drilled down into activities of licensed users, activities of administrators, activities of external users, and more. Moreover, custom views can be added according to the requirements of the organization. In general, charts and graphs will be generated for org-wide OneDrive activities. But admins can also find individual visual representations for OneDrive activities.

Microsoft OneDrive Audit Dashboard

OneDrive Alerting

Microsoft OneDrive Alerting

Stay on top of all suspicious OneDrive activities happening in the organization.

In addition to OneDrive auditing reports, admins can find prebuilt alert policies on an unusual volume of file deletion, OneDrive resources using anonymous links, an unusual volume of anonymous link creations, accessed OneDrive files, etc. Deploying these alert policies help admins to receive instant notifications anytime when an alert is triggered for that OneDrive activity.

Stay on Top of Unusual OneDrive Activities

Monitor Unusually Shared OneDrive Files to External Users

OneDrive files shared with external users in unusual numbers have a high risk of exposing confidential files in the organization. With AdminDroid, stay alerted whenever the OneDrive files are shared in the abnormal count.

Be Careful With Unusual External File Activity

Unusual external access activity over a OneDrive file may sometimes compromise the organization’s security standards. So, admins can configure an alert when the external file access exceeds a certain count.

Keep an Eye Out for OneDrive Files that are Deleted in Unusual Numbers

Unusual deletion of OneDrive files in a short time needs to get addressed quickly as they are the major sign of insider threats. Get alerts when any user deletes files in unusual numbers within a short time.

Terminate the Trespassing Done Via an Anonymous Link

Anonymous sharing link creations in high numbers often involve the intruder accessing sensitive information, thereby causing data leakages. Admins can avoid such threats by adopting an alert when anonymous links are created at an unusual volume.

Get Notified on Suspicious OneDrive Events

Audit Anonymously Created OneDrive Links

Anonymously created OneDrive links must get monitored as they allow people outside the organization to access them. With AdminDroid, admins can get alerted when an anonymous link is created along with details like who created it, what file is being shared, etc.

Pay Attention to the OneDrive File Access History

Complete OneDrive file access helps admins in generating the OneDrive file traffic of an organization. With this alert, admins can get notified whenever a OneDrive file is accessed and as well as the information on who has access to which files.

Watch Out for Anonymously Accessed OneDrive Files

OneDrive files accessed by anonymous users must get closely monitored as they act as a major pathway to cause threats. Prevent data misusage by configuring an alert when a file is accessed using the shared anonymous links in the organization.

Show All