I would like to identify an individual who forwarded a confidential message to a number of Internet correspondents. How can I do that?


Reports on e-mail traffic are based on events imported from Exchange message tracking files, where the only information that shows that a message may have been forwarded is its subject. It is - normally - tagged with 'FWD:', 'Tr:' or any other similar abbreviation based on your own language.

The solution would be to use the Find Specific Messages report template, that you will find on the Templates > Mailbox Traffic menu. The filter you need to set is:

Subject, Like, Fwd:* (or Subject, Like, Tr:* etc.)

See also:

How can I find or exclude messages with a certain subject from the Find Specific Messages report ?

Add Feedback