I would like to identify an individual who forwarded a confidential message to a number of Internet correspondents. How can I do that?
Reports on e-mail traffic are based on events imported from Exchange message tracking files, where the only
information that shows that a message may have been forwarded is its subject. It is - normally - tagged with 'FWD:', 'Tr:' or any other similar abbreviation based on your own language.
The solution would be to use the Find Specific Messages
report template, that you will find on the Templates > Mailbox Traffic
menu. The filter you need to set is:
Subject, Like, Fwd:*
(or Subject, Like, Tr:*
How can I find or exclude messages with a certain subject from the Find Specific Messages report ?