One of the key challenges with Office 365 is monitoring security events and integrating these into an on-premise security event management systems. The APIs have not been readily available for generating feeds to get activity data out of Office 365.
Microsoft announced today a new Office 365 Management Activity API that will enable feeding these events into their future SIEM solutions. There are a number of vendors who are now participating in the preview program – see this list for more details.
