Microsoft 365 audit logs retain 180 days of activity — but the compliance portal wasn’t built for serious investigations. Rudie de Vries explains the retention ceiling, bulk extraction via PowerShell, and what happens when the clock runs out mid-investigation.

read more