best response confirmed by ThereseSolimeno (Microsoft)
Solution

It's audited as part of the Unified Audit log feature: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compl...

Easiest way to get to the corresponding events is to search by cmdlet name.

www.000webhost.com