Analysing Microsoft audit logs

Hi, I am not from a cyber security background but I need some advice. I work as an IT support for my company and it's a medium sized company with a small IT team managing everything. So we don't have a SIEM or XDR solution or SOC analyst in our team. So I had an employee come in for suspicious activ