In EXCHANGE 365, I need to Flag any mail going to @thisdomain.com

I was asked by my CEO if I can monitor any mail that is going to one of our competitors.

Someone in my organization is leaking information to one of our competitors.

Here is what I want to do.   I want to create a flag or notification when someone in our company/domain sends an email to one of our competitors.

Ultimately I want to see a copy of the message but I do not want the end users to know about it.
Lenny CordiscoIT ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
If your outbound email goes direct from your Exchange server, the easiest way to find this might be via your firewall logs. That will also give you some historic information as well in case the individual has stopped already.
Of course keep in mind this will only help if the individual is sending via your company's mail server. If they were smart, they wouldn't be doing that anyway.
0
Todd NelsonSystems EngineerCommented:
Ronin provided some good references.

Keep in mind that the information being "leaked" may not be through email or even from your email domain.  With that said, you should be able to easily create a mail flow rule in the EAC to send a copy of any email based on recipient addresses.

If you are currently configured for hybrid, make sure to create the rule both on premises and in EXO.
0
Lenny CordiscoIT ManagerAuthor Commented:
Thanks Guys,    ....and yes.   I am aware that the leak may not be happening through our mail system.   In fact, I advised the CEO that aside from adding rule on the mail server, there may be no way to figure this out.  Most people use personal email and cell phones as well.  

I would like to think that people are smart and would know not correspond with a competitor through our mail system...  

Gonna see if I can set that up now.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.