<div>
<div class="content wysiwyg-content">
We have a monitoring tool that is reporting over 40K modified attributes for one specific user. I've checked Microsoft TechNet, however I don't see these attributes listed anywhere with details. The attributes are:<br />
<br />
msExchMailboxAuditLastAdmi<wbr />nAccess<br />
msExchMailboxAuditLastDele<wbr />gateAccess<wbr /><br />
<br />
Is there someone that can tell me what these attributes are used for and why anyone would modify them?
</div>
</div>


We have a monitoring tool that is reporting over 40K modified attributes for one specific user. I've checked Microsoft TechNet, however I don't see these attributes listed anywhere with details. The attributes are:

msExchMailboxAuditLastAdminAccess
msExchMailboxAuditLastDelegateAccess

Is there someone that can tell me what these attributes are used for and why anyone would modify them?

Exchange Modified Attribute

Digital forensics encompasses the recovery and investigation of material found in digital devices, often in relation to computer crime. Digital forensics investigations have a variety of applications. The most common is to support or refute a hypothesis before criminal or civil (as part of the electronic discovery process) courts. The technical aspect of an investigation is divided into several sub-branches, relating to the type of digital devices involved; computer forensics, network forensics, forensic data analysis and mobile device forensics. The typical forensic process encompasses the seizure, forensic imaging (acquisition) and analysis of digital media and the production of a report into collected evidence.

Digital Forensics

An email client, email reader or more formally mail user agent (MUA) is a computer program used to access and manage a user's email. A web application that provides message management, composition, and reception functions is sometimes also considered an email client, but more commonly referred to as webmail.