Someone got access to one of your client’s M365 mailboxes, now what?

Mission: Make sure you have auditing enabled for all your clients