{"id":7122,"date":"2026-04-17T09:56:28","date_gmt":"2026-04-17T07:56:28","guid":{"rendered":"https:\/\/logmanager.com\/?post_type=how_to&#038;p=7122"},"modified":"2026-05-27T10:54:10","modified_gmt":"2026-05-27T08:54:10","slug":"vysetreni-podezreleho-office365-login","status":"publish","type":"how_to","link":"https:\/\/logmanager.com\/cs\/docs\/how-to\/vysetreni-podezreleho-office365-login\/","title":{"rendered":"Jak investigovat podez\u0159el\u00e9 p\u0159ihl\u00e1\u0161en\u00ed do Office 365"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Podez\u0159el\u00e1 p\u0159ihl\u00e1\u0161en\u00ed do cloudov\u00fdch slu\u017eeb m\u00e1lokdy existuj\u00ed izolovan\u011b. N\u00e1sleduj\u00edc\u00ed n\u00e1vod je u\u017eite\u010dn\u00fd, proto\u017ee ukazuje, jak p\u0159ej\u00edt z Office 365 alertu k \u0161ir\u0161\u00ed aktivit\u011b v on-premises prost\u0159ed\u00ed i nap\u0159\u00ed\u010d dal\u0161\u00edmi syst\u00e9my. D\u00edky tomu lze snadn\u011bji ur\u010dit, zda je ud\u00e1lost ne\u0161kodn\u00e1, souvis\u00ed s u\u017eivatelem, nebo je sou\u010d\u00e1st\u00ed z\u00e1va\u017en\u011bj\u0161\u00ed kompromitace.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pokud preferujete video n\u00e1vod, je k dispozici n\u00ed\u017ee (pouze EN):<br><\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"How to Investigate Suspicious Login Activity | Logmanager\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/3DQNbdgB6YU?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">1. Za\u010dn\u011bte na dashboardu Office 365<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Otev\u0159ete dashboard\u00a0<strong>Office 365<\/strong>\u00a0a filtrujte alerty ozna\u010den\u00e9 tagem\u00a0<strong>notified<\/strong>. Pot\u00e9 otev\u0159ete konkr\u00e9tn\u00ed logov\u00fd z\u00e1znam spojen\u00fd s podez\u0159el\u00fdm p\u0159ihl\u00e1\u0161en\u00edm. T\u00edm z\u00edsk\u00e1te u\u017eivatelsk\u00e9 jm\u00e9no a zdrojovou IP adresu pot\u0159ebnou pro dal\u0161\u00ed kroky.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/logmanager.com\/wp-content\/uploads\/2026\/03\/security-logmanager-office365-dashboard-with-suspicious-logins.png\" alt=\"Office 365 overview dashboard in Logmanager showing the suspicious login alert details\"\/><figcaption class=\"wp-element-caption\"><em>Obr. 1:\u00a0Dashboard Office 365 v Logmanageru zobrazuj\u00edc\u00ed detaily alertu podez\u0159el\u00e9ho p\u0159ihl\u00e1\u0161en\u00ed.<\/em><\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">2. Zam\u011b\u0159te se na IP adresu<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vyfiltrujte ve\u0161kerou aktivitu ze zdrojov\u00e9 podez\u0159el\u00e9 IP adresy a odstra\u0148te filtry, kter\u00e9 omezuj\u00ed zobrazen\u00ed pouze na alertovan\u00e9 ud\u00e1losti. To umo\u017en\u00ed zobrazit \u0161ir\u0161\u00ed kontext, v\u010detn\u011b aktivit, kter\u00e9 samy o sob\u011b alert nespustily.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Zkontrolujte souvisej\u00edc\u00ed u\u017eivatele<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Pokud je stejn\u00e1 zdrojov\u00e1 IP adresa spojena s v\u00edce ne\u017e jedn\u00edm u\u017eivatelsk\u00fdm jm\u00e9nem, prov\u011b\u0159te v\u0161echny souvisej\u00edc\u00ed \u00fa\u010dty. V uveden\u00e9m p\u0159\u00edkladu jeden z u\u017eivatel\u016f smazal velk\u00e9 mno\u017estv\u00ed soubor\u016f, co\u017e okam\u017eit\u011b zvy\u0161uje z\u00e1va\u017enost incidentu.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/logmanager.com\/wp-content\/uploads\/2026\/03\/security-suspicious-IP-related-to-multiple-O365-accounts-in-logmanager.png\" alt=\"Investigation in Logmanager showing the suspicious IP associated with multiple Office 365 usernames\"\/><figcaption class=\"wp-element-caption\"><em>Obr. 2:\u00a0Vy\u0161et\u0159ov\u00e1n\u00ed v Logmanageru zobrazuj\u00edc\u00ed podez\u0159elou IP adresu spojenou s v\u00edce u\u017eivatelsk\u00fdmi jm\u00e9ny v Office 365.<\/em><\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">4. P\u0159esu\u0148te se do \u0161ir\u0161\u00edho prost\u0159ed\u00ed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Zkop\u00edrujte podez\u0159el\u00e9 u\u017eivatelsk\u00e9 jm\u00e9no a p\u0159epn\u011bte se na obecn\u00fd dashboard p\u0159ehledu log\u016f. Zkontrolujte v\u0161echny souvisej\u00edc\u00ed akce v dal\u0161\u00edch syst\u00e9mech, v\u010detn\u011b Windows. Hledejte vytvo\u0159en\u00ed \u00fa\u010dtu, reset hesla, povolen\u00ed \u00fa\u010dtu nebo p\u0159id\u00e1n\u00ed u\u017eivatel\u016f do skupin, proto\u017ee tyto aktivity mohou nazna\u010dovat eskalaci opr\u00e1vn\u011bn\u00ed nebo zaji\u0161t\u011bn\u00ed persistence.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/logmanager.com\/wp-content\/uploads\/2026\/03\/security-file-deletion-activity-in-O365-dashboard-in-logmanager.png\" alt=\"Suspicious login investigation in Logmanager showing file deletion activity or broader cross-system actions\"\/><figcaption class=\"wp-element-caption\"><em>Obr. 3:\u00a0Vy\u0161et\u0159ov\u00e1n\u00ed podez\u0159el\u00e9ho p\u0159ihl\u00e1\u0161en\u00ed v Logmanageru zobrazuj\u00edc\u00ed maz\u00e1n\u00ed soubor\u016f nebo \u0161ir\u0161\u00ed akce nap\u0159\u00ed\u010d syst\u00e9my.<\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/logmanager.com\/wp-content\/uploads\/2026\/03\/security-cross-system-activity-showing-account-creation-for-O365-in-logmanager.png\" alt=\"Windows or cross-system activity in Logmanager showing account creation password reset or group changes after suspicious login\"\/><figcaption class=\"wp-element-caption\"><em>Obr. 4:\u00a0Aktivita ve Windows nebo nap\u0159\u00ed\u010d syst\u00e9my v Logmanageru zobrazuj\u00edc\u00ed vytvo\u0159en\u00ed \u00fa\u010dtu, reset hesla nebo skupinov\u00e9 zm\u011bny po podez\u0159el\u00e9m p\u0159ihl\u00e1\u0161en\u00ed.<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Pro v\u00edce informac\u00ed o nastaven\u00ed p\u0159\u00edjmu log\u016f z Microsoft cloudu nav\u0161tivte <a href=\"https:\/\/doc.logmanager.com\/latest\/cz\/web-interface\/sources\/office-365\/\" data-type=\"link\" data-id=\"https:\/\/doc.logmanager.com\/latest\/cz\/web-interface\/sources\/office-365\/\">Logmanager Office 365 dokumentaci<\/a>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Zjist\u011bte, jak p\u0159ej\u00edt z Office 365 alertu k \u0161ir\u0161\u00ed aktivit\u011b nap\u0159\u00ed\u010d dal\u0161\u00edmi syst\u00e9my.<\/p>\n","protected":false},"author":7,"featured_media":6546,"parent":0,"template":"","how_to_tag":[45],"class_list":["post-7122","how_to","type-how_to","status-publish","has-post-thumbnail","hentry","how_to_tag-how-to"],"acf":[],"_links":{"self":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/how_to\/7122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/how_to"}],"about":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/types\/how_to"}],"author":[{"embeddable":true,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/users\/7"}],"version-history":[{"count":1,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/how_to\/7122\/revisions"}],"predecessor-version":[{"id":7125,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/how_to\/7122\/revisions\/7125"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/media\/6546"}],"wp:attachment":[{"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/media?parent=7122"}],"wp:term":[{"taxonomy":"how_to_tag","embeddable":true,"href":"https:\/\/logmanager.com\/cs\/wp-json\/wp\/v2\/how_to_tag?post=7122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}