How Microsoft 365'S Mailitemsaccessed Event Helps Forensic Investigations
Microsoft 365’s MailItemsAccessed event helps forensic investigations by allowing investigators to access the items in a mailbox that have been accessed recently. This event is fired when an investigator logs into their mailbox and accesses any of the items in their mailbox. This event can be used to determine whether an item has been accessed recently, or if an item has been deleted or moved from one mailbox to another. Additionally, this event can be used to determine which folders have been accessed recently and which folders have not been accessed since last time the investigator logged into their mailbox....