Office 365 Alert for moving messages to deleted folder

[Mary Hester]

Salutations!

We would like to be able to get an alert when all messages in a mailbox are moved to deleted.  We currently use the alert feature and receive notification when rules are created to forward emails.  Lately, when a mailbox is compromised, we see deletion rather than forwarding.

Suggestions on how this can be done?

Thanks

[#2 · Accepted solution]

Unfortunately there is no "mass delete emails" condition you can use with the Alert policies functionality. You can use the good old Activity alerts feature, but it is fairly limited and you will not be able to configure counts, in other words it will only allow you to configure an alert *every time* and email is deleted, which is not something you want.

Another option is to use the MCAS activity policies feature, but that requires additional licensing.

[#3]

Thank you Vasil. Very helpful!