Make sure Microsoft Office 365 logging and auditing is set up properly so forensic data is available when needed.