**********************
PowerShell transcript start
Start time: 20260605043730
Username: AzureAD\jeremyfontenot
RunAs User: AzureAD\jeremyfontenot
Configuration Name: 
Machine: DESKTOP-MR3F9A1 (Microsoft Windows NT 10.0.26200.0)
Host Application: C:\Program Files\PowerShell\7\pwsh.dll -NoExit -RemoveWorkingDirectoryTrailingCharacter -WorkingDirectory C:\Users\jeremy\Documents\projects\jeremyfontenot! -Command $host.UI.RawUI.WindowTitle = 'PowerShell 7 (x64)'
Process ID: 48348
PSVersion: 7.6.2
PSEdition: Core
GitCommitId: 7.6.2
OS: Microsoft Windows 10.0.26200
Platform: Win32NT
PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1, 6.0, 7.0
PSRemotingProtocolVersion: 2.4
SerializationVersion: 1.1.0.1
WSManStackVersion: 3.0
**********************
Transcript started, output file is .\evidence-library\projects\microsoft-365-lab\entra-activity-proof-20260605-043730\entra-activity-proof-transcript-20260605-043730.txt
Welcome to Microsoft Graph!

Connected via delegated access using 14d82eec-204b-4c2f-b7e8-296a70dab67e
Readme: https://aka.ms/graph/sdk/powershell
SDK Docs: https://aka.ms/graph/sdk/powershell/docs
API Docs: https://aka.ms/graph/docs

NOTE: You can use the -NoWelcome parameter to suppress this message.
NOTE: Sign in by Web Account Manager (WAM) is enabled by default on Windows systems and cannot be disabled when using the default ClientId.
To disable WAM run Set-MgGraphOption -DisableLoginByWAM $true and then use a custom ClientId.

Name                                                Length LastWriteTime
----                                                ------ -------------
activity-export-errors.csv                               0 6/5/2026 4:38:17 AM
directory-audits-recent.csv                          18453 6/5/2026 4:37:33 AM
directory-audits-recent.json                         81876 6/5/2026 4:37:33 AM
entra-activity-proof-summary.json                      342 6/5/2026 4:38:17 AM
entra-activity-proof-transcript-20260605-043730.txt    941 6/5/2026 4:37:30 AM
README.md                                             1005 6/5/2026 4:38:17 AM
sign-ins-recent.csv                                  56650 6/5/2026 4:38:17 AM
sign-ins-recent.json                                137292 6/5/2026 4:38:17 AM

**********************
PowerShell transcript end
End time: 20260605043817
**********************