Doesn't help much after the fact though does it?

-----Original Message-----
From: Bourque Daniel [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 29, 2003 8:14 PM
To: Exchange Discussions
Subject: RE : Can I search Exchange for a specific phrase?


Build a specific signature that look for the string you are looking for in
your external IDS and once it trigger, correlate the IDS log with your FW
log to look at who was on-line (web e-mail) or what e-mail msg (SMTP) was
sent at the same time...

No need to look in everybody e-mail...


-----Message d'origine-----
De : Brian Dugas [mailto:[EMAIL PROTECTED] 
Envoyé : 29 octobre, 2003 14:36
À : Exchange Discussions
Objet : Can I search Exchange for a specific phrase?



We have a user who we think maybe sending info to a competitor. Is there a
way to search through all users emails for a specific phrase, namely the
competitors name? We are running Exchange 5.5 sp4

Thanks in advance.

Brian

Ps. I am going to the archives now, but was hoping for a quick answer from
someone knowledgeable on the list.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to