Sharepoint Online - List sharing links via Powershell

Mark Sammon

Hi,

Adding the question here I asked during a live recording about Sharepoint online,

When sharing files using O365/Sharepoint Online, a sharing link is created against the file which you can send out. For audit purposes we would link to know which files have had links created against them and if so what type of links they are (Public or only available to logged in users etc..)

There doesn't appear to be a report that lists them but can the information be retrieved using Powershell? I did try looking online but couldn't find a suitable powershell command.

Thanks in advance

Mark

Ronnie Wong

@Mark-Sammon,

I think this may be what you're looking to do but with some limitations.

--It's only for activities performed in the lat 90 days.
--After an event it can take up to 30 minutes or 24 hrs before a log entry is displayed.

You must turn on audit logging on "Audit log search" in the Security & Compliance Center This may take couple of hrs to turn on.

You have to be assigned "View-Only Audit Logs" in Exchange Online in Permissions

After the setup you can search the audit logs

Run an audit log search start from:
https://protection.office.com
Click Search & investigation
click Audit log search
You must configure the Activities you want to search for: Shared File, Folder, or site
View the search
Filter the seaerch
Export it to a file

Here's the link to what I summarized above:
https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US#folderactivities&ID0EABAAA=Audited_activities