Message Trace Report on CC'd field

Question

Hello, is there a way to get a report of all emails received at a mailbox where the mailbox was CC'd on rather than To or Bcc? Because emails may have been deleted from the mailbox, using Outlook to search would be incomplete. The PowerShell command, Get-MessageTrace , doesn't seem to differentiate these fields either. Thanks.

Answer 1

Hi @Anon4343 ,

emails may have been deleted from the mailbox

I wonder if this email was deleted from the deleted item for more than 14 days?
If not , I would suggest you could refer to this link to create a content search in the Microsoft Purview compliance portal.

Create and run a Content search in the Microsoft Purview compliance portal - Microsoft Purview (compliance) | Microsoft Learn

And please refer to the screenshot below to enter cc parameter in the conditions. This will search for all mailboxes in the database that contain this message.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.