A collection of PowerShell scripts called Microsoft-365-Extractor-Suite enable accurate and thorough acquisition of the Microsoft 365 Unified Audit Log.
- Show the number of sources for logs that are accessible.
- Gather all audit recording data
- Group audit logging extraction
- Extract certain audit recording data (advanced mode)
Disclaimer: The intended use for the tool is strictly educational and should not be used for any other purpose.
Download Link: https://github.com/invictus-ir/Microsoft-365-Extractor-Suite