Activity Monitoring for Microsoft Teams
Skyhigh CASB for Microsoft Teams allows Security Operations Center (SOC) Admins to monitor user activities in Teams. The table below provides specific logging information related to user activity across teams, channels, and group chats.
Based on the activity type, the following details are available on the Activity Monitoring page along with the User ID and Source IP.
| Activity | Team Name | Communication Type | Member Detail | Channel Name | Channel Type |
|---|---|---|---|---|---|
| Team Created | .png?revision=1&size=bestfit&width=30&height=30) |
|
.png?revision=1&size=bestfit&width=30&height=30) |
|
|
| Team Deleted | |
|
|
|
|
| Member Added to Teams | |
|
|
|
|
| Member Removed in Teams | |
|
|
|
|
| Channel Added | |
|
|
|
|
| Channel Deleted | |
|
|
|
|
| Member Added to Channel | |
|
|
|
|
| Member Removed in Channel | |
|
|
|
|
| Member Added in Group Chat | |
|
|
|
|
| Member Removed in Group Chat | |
|
|
|
|
For example, the enhanced metadata related to the Member Removed in Channel activity can be found on the Cloud Card below.
