HubStor Added Microsoft Office 365 Audit Log Compliance Archiving and Search

HubStor Inc. announced new WORM archiving and search capabilities for Microsoft Office 365’s unified audit log to help organizations meet their regulatory compliance requirements and bolster their litigation preparedness posture.

The unified audit log in Office 365 is a record of all user activity such as Azure Active Directory login events, document retrievals in SharePoint Online and OneDrive for Business, and email activity in Exchange Online. It can also be configured to record administrative actions which companies can use to help identify insider threats.

“The problem is that Office 365 does not store the event history beyond 90 days, nor does it preserve the content in a way that satisfies compliance requirements for immutability,” said Greg Campbell, CTO, HubStor. “Regulations and auditors can require organizations to keep detailed audit records for extended periods of time securely, and legal teams often need a friendly way to search and collect this data.“

With HubStor’s new connector for the Microsoft Office 365 audit log, clients can automatically harvest event history data from their Office 365 tenant and have it preserved and searchable in Microsoft Azure for as long as necessary.

“It is true that the primary business driver for audit log archiving is compliance. However, there is tremendous value in keeping this data long term as an essential element in a proactive archive strategy for litigation preparedness,” said Elizabeth Lam, VP marketing, HubStor. “Others may find value in keeping this data long term for HR and security reasons too.“

Using HubStor’s data-aware storage architecture, all properties from the Office 365 audit log are searchable. Regardless of the search field settings, HubStor always preserves the complete and unmodified JSON for the audit event to produce an exact copy of the record as it was in Office 365. HubStor’s data governance rules engine can also consume event properties for use in data retention, full-text indexing, tagging, and WORM storage policies.

HubStor supports targeted capture from the audit log for clients that only need long-term preservation of specific event types.

The discovery search interface in HubStor allows privileged users to find the relevant events quickly. For example, a search may look for all the information accessed by a person of interest in a particular SharePoint document library within a date range. Event records of interest can be placed on legal hold and easily exported in JSON format.

The new HubStor connector for the Office 365 audit log is available.