Can you investigate Microsoft 365

Yes. Depending on the permissions, licensing, retention settings, and available evidence, Microsoft 365 can provide valuable forensic evidence from services such as Exchange Online, OneDrive, SharePoint, Teams, Microsoft Entra ID, and associated audit records.