M365 Exchange - Email Reports - emails without TLS

Copper Contributor

Is there a way to pull email logs associated to a sender, recipient, and date based on subject and list if email was encrypted, and if so, what version of encryption was used? For example, I need to know if emails sent with "encrypt" in the subject were sent via TLS. 

 

I tried doing a compliance search and while I could get the emails associated, I couldn't determine if they were sent with TLS. 


Any input is greatly appreciated. 

3 Replies
You can do it by running a message trace (https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc?view=o...) and selecting extended report.
This will show TLS information

@Thijs Lecomte - Thank you for your response. The big kicker I failed to mention was that I need emails older than 90 days. Possibly going back 1 year. 

Then you are out of luck AFAIK, unless you have stored that info somewhere else