Over the weekend I have acquired a new client who had their network admin recently leave.
They are in the process of migrating from Exchange 2010 to 2013. They are a small company and did not want to spring for a 2016 or 19 upgrade. To top things off, they were hacked last week and their exchange environment was compromised.
Details
Less than 50 users.
I believe that they have a recent Exchange 2010 database backup.
I also think they created images of the servers prior to the attack taking place.
They have additional servers that can be utilized if needed.
Exchange 2010 is running on a Dell PE 2850 and Windows Server 2008 std.
Exchange 2013 is running on a Dell PE 2950 and Windows Server 2012 std.
Thank you for your assistance!
What happened to the server?
Is it full off or its encrypted. please explain.
-->I believe that they have a recent Exchange 2010 database backup.
If they have a backup restore the backup a quick solution.