Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

OfficeActivity: is it possible to extract an email recipient ?

Brass Contributor


here's the situation: my client wants a Sentinel workbook showing the most common email subject - so far, no problems - AND also showing the recipient. As Hamlet would say, there is the rub: is there a way to find an email recipient from OfficeActivity table ? The "send" , "sendas", "sendonbehalf" activities do not mention the mail recipient. Is there a way to collect this from OfficeActivity table or do I have to query Office directly via an API ?





1 Reply