Forum Discussion
OfficeActivity: is it possible to extract an email recipient ?
Hi, here's the situation: my client wants a Sentinel workbook showing the most common email subject - so far, no problems - AND also showing the recipient. As Hamlet would say, there is the rub: is ...
Not sure if this is helpful, but it might give some insight about the subject : https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/office-365-email-activity-and-data-exfiltration-detection/ba-p/1169652