Search within mail headers
alenazi90 opened this issue · comments
Is there a way to search within mail headers? This will allow searching attachment hashes if mail gateway is implemented, as such; Ironport email gateway calculate attachments hashes and append them in the email headers.
@alenazi90 Unfortunately, Microsoft doesn't allow you to search RFC 822 mail headers using their eDiscovery endpoints. You could do a search and then retrieve the mail headers and look in each one for the hash.