Feedback by UserVoice

Brandon Petkov

My feedback

  1. 192 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  Office 365 Security & Compliance » eDiscovery  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Brandon Petkov commented  · 

    A bad actor used admin credentials to set up forwarding rules for 4 user accounts. Because those forwarded emails are not saved by default in sent emails, I can only find them through message trace. Message trace doesn't generate Document IDs and I cannot run a content search based on any of the information that message trace DOES generate, so our legal team will have to go through ~15000 emails instead of ~5000, then match them against the ~5000 we know were forwarded to an external address.

Feedback and Knowledge Base