Query Details
Linksin Teams Messages
Query
//This will produce results to show when links have been created in Teams chats and channels. Will not show actual link, though. Still working on that.
OfficeActivity
| where OfficeWorkload =~ "MicrosoftTeams"
| where Operation in ("MessageCreatedHasLink", "MessageEditedHasLink")
Explanation
This query is looking for activities in Microsoft Teams where links have been created in chats and channels. However, it does not display the actual links yet.
Details
Rod Trent
Released: June 25, 2021
Tables
OfficeActivity
Keywords
OfficeActivity,MicrosoftTeams,MessageCreatedHasLink,MessageEditedHasLink
Operators
where=~in