Email Headers from Office 365

InsightIDR
1

Has anyone had success with getting email headers / email logs from Office 365 into Rapid 7?

2

Hey @patrick_hook,
Not actually sure if Microsoft will let you audit the headers. I do know you can do a manual trace of an email, but not automatic logging.


However, if you can write those email logs to an event hub, then IDR can ingest them through our Azure event source.

I hope this helps, but do let me know if you have further questions.

Regards,
Felipe