Complete the following steps to turn on auditing:
- Sign in to the Microsoft Purview portal.
- Select the Audit solution card.
- If the Audit solution card isn't displayed, select View all solutions and then select Audit from the Core section.
- If auditing isn't turned on for your organization, a banner is displayed prompting you to start recording user and admin activity.
- Select the Start recording user and admin activity banner.
Follow this detailed guide to enable auditing which will allow Hunters to collect data.