Exchange Online Transport Rule Audit
This is a topic that still comes up when doing email investigations. After there has been an issue, we want to perform analysis to determine what may have happened any potentially why certain security controls did not act the way we expected.
With email one example would be around the audit information collected when an Exchange Online transport rule acts upon a message.
It is common to see that ad… Read the rest “Exchange Online Transport Rule Audit”