Forum Discussion
Identifying date / timestamp of "Deleted" emails recovered via eDiscovery?
We have a "Never Delete" policy applied to our user mailboxes. In performing an eDiscovery, we are able to see all past Deleted emails found via the DiscoveryHolds and Deletions folders in the Discovery export.
The question is, is there a way to also find out what the actual deletion date/time stamp was for these emails?
1 Reply
- You can only get this data via the Audit log, but events therein are kept for limited duration. So no guarantees.
