We've reorganized our navigation structure to align directly with your operational workflows. See the Google SecOps release notes for more information.
Stay organized with collections
Save and categorize content based on your preferences.
Change log for MICROSOFT_GRAPH_ACTIVITY_LOGS
Date
Changes
2024-10-08
Enhancement:
- Changed the mapping of "properties.requestUri" from "network.http.referral_url" to "target.url".
2024-09-05
Enhancement:
- Removed mapping of "callerIpAddress" from "principal.ip" and "principal.asset.ip".
- Mapped "properties.C_Idtyp" to "principal.user.account_type".
- Changed mapping of "properties.appId" from "target.resource.product_object_id" to "principal.resource.product_object_id".
- Changed mapping of "properties.requestUri" from "target.url" to "network.http.referral_url".
- Changed mapping of "properties.servicePrincipalId" and "properties.userId" from "principal.user.userid" to "principal.user.product_object_id".
2024-07-09
Enhancement:
- Added support for a new type of JSON logs.
2024-05-27
- Set "metadata.vendor_name" as "Microsoft" and "metadata.product_name" as "Microsoft Graph".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-06-29 UTC."],[],[]]