As we mentioned previously, the value stored in the AuditData column is a JSON object. To manipulate it, you'll need to use ConvertFrom-Json cmdlet. In this example, you can expand the first entry in your imported CSV file to view what properties are available:

$AuditLog[0].AuditData | ConvertFrom-Json

The following screenshot shows the output of a PowerShell console session that was used to extract audit data:

Now, let's learn how to filter data.