Consult mailbox exchange online with sentinel

[Harold_Quiroga]

I have a request from my company which wants through sentinel to obtain this information Automatic

1. File Upload of mail traces

2. Less time to download the traces.

3. Quick query of mailboxes in any date range

4. Guarantee a long Retention Time of the traces.

5. Audit of mailboxes.

any suggestions?

thx

[#2]

the is a great summary here https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/how-to-protect-office-365-with-azure-...


https://github.com/OfficeDev/O365-ActivityFeed-AzureFunction/tree/master/Sentinel/msgtrace

Sentinel by default will store the data for 90days, this can be increased in the UI for up to 2yrs. Long term retention is also available. 90days --> 100yrs.