Using SAM to monitor O365 event log

dmartzall

Hi all,

I am hoping that some of you may have already done the heavy lifting and created a monitoring component that can sift through O365 event logs for AD Group changes.  I have a script that can check for these changes on our on-prem DCs, but I haven't has the same success with the O365 monitor.  I found a doc from Microsoft that says that you can use an API to search the event logs.  I haven't started building this solution, yet.  Has anyone tried this? 

Thanks in advance.