Occasionally, my office is tasked with validating users at-computer activity or lack thereof in response to a security incident, manager suspicions, or possible timecard fraud.
https://netsecninja.github.io/analysis/2021/02/11/ms-teams-logs-activity.html