Hello,
Not sure if this should be posted here or in the Security and Compliance hub.
I have a user account that created a meeting with no title and no content or attachments. The invite was sent out to 4 internal users and 4 external users. She claims she didn't send the invite. I did a message trace and the invite did originate from our O365 tenant, and she did see it in her sent items.
First thought is that it's potential virus, so I scanned her laptop with 2 different AVs and it didn't detect anything. Then I figure it may have come from byod phone, for which she doesn't have an AV installed.
I was wondering if there is a way to determine whether the invite was create on a mobile device or their corp laptop.
I checked her email activity and there's been no other suspicious emails sent from her account. There was no strange title or malicious payload. I'm starting to suspect that she may have inadvertently sent out the meeting invite. I don't even know if that's possible by mistakenly hitting some key combo. But she said that the recipients would never have had any common meetings, and their not part of any special groups.
Thanks,
Mike
