What are Exchange Admin events?
Events like adding, changing, or removing objects in your portal.
Prerequisites:
A modern version of Powershell, most Windows 10 and Windows 2016+
First create your session to your Office 365 portal:
$Session = New-PSSession -ConnectionUri https://outlook.office365.com/powershell-liveid/ -ConfigurationName Microsoft.Exchange -Credential $credentials -Authentication Basic -AllowRedirection
Run the search command in a script block against your session and output to grid:
Invoke-Command -ScriptBlock { Search-UnifiedAuditLog -recordtype ExchangeAdmin -enddate "3/9/2020" } -Session $session | Out-GridView
References: https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-audit/search-unifiedauditlog?view=exchange-ps