Forum Discussion

Molx32's avatar
Molx32
Brass Contributor
Nov 25, 2019

[OFFICE 365 - EXCHANGE] Monitor in/out mails senders

Hello,

 

I am currently trying to establish statistics regarding the email activities on Office 365.

I spent some time trying to figure out how to access the sender / receiver email or account (and other related data). I didn't find anything concluant within the OfficeActivity logs.

 

Did you try to achieve this ?

Thank you for your answer.

  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor

    Molx32 Have you looked at the Office 365 Workbook?  It may not be 100% what you are looking for but it should give you a hint of how to get what you want if it doesn't.

    • thotho's avatar
      thotho
      Copper Contributor

      GaryBushey Thank you for your answer.I'm I'm also interesting. I think, what we would like it's to collects Message Trace data from Microsoft Office 365 including the following:
      Sender
      Recipient
      Subject
      To IP Address
      From IP Address
      Size
      Date Received

       

      Regards

    • Molx32's avatar
      Molx32
      Brass Contributor

      GaryBushey Thanks for your answer!
      I did look at Office 365 Workbook, but didn't find anything regarding email data. There are only information on the mailbox.

      I wonder if sender/receiver (and other data) are actually transmitted from Office 365 to Sentinel through the Office 365 connector. I try to figure out how to do this.

      • GaryBushey's avatar
        GaryBushey
        Bronze Contributor

        Molx32 That information is not captured in Sentinel.  Not sure if it would be in the Security Graph or not but you can check that as well.

Resources