I work as an infrastructure tech for a uni, and the senior engineer in my office has caused untold amount of issues.
Via HR, we got him to admit his activities, one of which is monitoring staff emails. (I know its illegal unless it comes from senior management).
However, the uni isn't great, and I still believe he is monitoring emails.
So, to explain, I am in Office 365, but have my AD account. We also have people on prem with AD accounts, and will be migrated eventually.
We set up a test, from HR to myself and another in HR. HR are still onprem. I found the corresponding exchange log, however 30 minutes are missing from this day.
Is there a way I can tell if he is still monitoring?