Forum Discussion
AppleKri
Feb 25, 2026Copper Contributor
Exchange online - track deleted mail
I am 365 admin and see quite often people rapport "all my mails are in deleted post - and I have done nothing" or similar What is the best practice to investigate that. I know in powershell I have ...
VasilMichev
Feb 26, 2026MVP
Audit logs are your best option here, they will clearly indicate who the actor was. And yes, in most cases it's the user itself, or some add-in they allowed. Especially relevant now with AI integrations that helpfully clean up everything in your Inbox :D