It would be great to have a crate that could deal with a compromised 365 account.
  1. Reset password
  2. Force logout from all sessions
  3. Check for forwarding rules
  4. Download login activity report
etc.....