Check who deleted or move an email item
January 7, 2020 | by iaur | posted as Compliance, Exchange Online
Requisite: Exchange Mailbox Audit SHOULD BE enabled Connect to EXO PowerShell Run the ff.cmdlets Search-MailboxAuditLog -Identity “targetuser@domain.com” -LogonTypes Owner,Admin,Delegate -ShowDetails -StartDate 10/21/2019 -EndDate 10/23/2019 | ..more