locked
How can I use Search-Mailbox to find messages sent from user's primarysmtpaddress? RRS feed

  • Question

  • Over the weekend one of our executives received a scary phishing email with his own email address as the sender. Since it landed in the junk email folder, presumably the phisher just used direct send to deliver it. He asked me to "check everyone's junk email folders to see if they are also receiving phishing emails sent from their own email addresses".

    This seems like is should be a pretty straightforward process to feed the PrimarySmtpAddress into -searchquery as 'from: $_.primarysmtpaddress' but I'm not good enough at PowerShell to make this work. Can anyone provide some guidance?

     
    Monday, October 8, 2018 6:41 PM

All replies