Skip to content

Feat: Read user reported messages from the unified audit log - #908

Merged
KelvinTegelaar merged 1 commit into
CyberDrain:devfrom
kris6673:fix/user-reported-admin-submissions
Oct 15, 2026
Merged

KelvinTegelaar merged 1 commit into
CyberDrain:devfrom
kris6673:fix/user-reported-admin-submissions

Conversation

@kris6673

Copy link
Copy Markdown
Contributor

Enable reading user reported messages from the unified audit log, providing a default view of reports from the last 180 days. Introduce a toggle to switch between audit log and Defender submissions, ensuring all relevant reports are accessible. Update documentation and add tests for the new paging behavior.

Graph's threatSubmission list leaves out Outlook reports unless an admin
submits them to Microsoft. The audit log has every report.

- Default to the audit log, two weeks per page back to 180 days. Halve a
  capped window so paging never skips reports.
- Keep Graph Defender Submissions behind an Audit Log / Submissions toggle.
- Collapse a reported phish simulation logged twice into one row.
- Use the tenant GUID in the Defender link.
- Update docs and add Pester tests for the paging.
@KelvinTegelaar
KelvinTegelaar merged commit f12138c into CyberDrain:dev Oct 15, 2026
17 of 18 checks passed
@kris6673
kris6673 deleted the fix/user-reported-admin-submissions branch October 16, 2026 05:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants