SOLVED

Search-MailboxAuditLog export email operations

Iron Contributor
Hello, is it possible to track through audit logs or other, the export|download of a mailbox to pst or some format for offline reading?

Eg does turning on OWA offline mode, or export pst using Powershell trigger an audit event?

I think Powershell is logged.

I guess I could perform this on my own mailbox to test, but any solid advice or knowledge would help here.
1 Reply
best response confirmed by AndrewX (Iron Contributor)
Solution

Export via PST is an admin-level functionality, so it's audited by default. Using the offline mode in clients is not audited afaik.

1 best response

Accepted Solutions
best response confirmed by AndrewX (Iron Contributor)
Solution

Export via PST is an admin-level functionality, so it's audited by default. Using the offline mode in clients is not audited afaik.

View solution in original post