A while ago I published an article about Office 365 minimum security baseline, based on some feedback and questions, I decided to create a good practice Ruleset of Office 365 Activity Alert’s.

Please review all the settings carefully before your run the script!

You must have a connection to the Security and Compliance Center!

Tip: Create a Shared Mailbox or Microsoft Office 365 Unified Group that gets the alert and notification mails. Or use the Mail address of a Microsoft Teams Channel and push it directly into a Teams Channel!

Update: Screenshot was wrong, a good practice ruleset of Office 365 Protection Alert’s is also available.