OfficeActivity: is it possible to extract an email recipient ?

[PhilippeAugras]

Hi,

here's the situation: my client wants a Sentinel workbook showing the most common email subject - so far, no problems - AND also showing the recipient. As Hamlet would say, there is the rub: is there a way to find an email recipient from OfficeActivity table ? The "send" , "sendas", "sendonbehalf" activities do not mention the mail recipient. Is there a way to collect this from OfficeActivity table or do I have to query Office directly via an API ?

Regards,

P.

[#2]

Not sure if this is helpful, but it might give some insight about the subject : https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/office-365-email-activity-and-data-ex...