how to find out who shared this user's file from his OneDrive?

Web: https://www.reddit.com/r/cybersecurity/comments/11st4ek/how_to_find_out_who_shared_this_users_file_from/

A user reached out to me and said he recieved a few emails with the subject " ***Subject:*** *SharePoint App () has created an anonymous access link to <file name>*". Which he did not do. Basically someone has shared files from his onedrive.

Any tips on how to investigate this? Is there a log I can access to see who initiated the share?

cybersecurity find onedrive