Egress, Email search for SAR

[Areku]

Morning all.

 

Currently collecting data ive been asked for off our various platforms, and one of the things been asked for are "any communications"  now I've managed to include any unencrypted communications. (exchange 365)

however i've noticed the "you have new egress" mails being captured, but not the actual content. (not supprising considering its an end2end encryption platform).

 

Do you know if theres anyway to include the content of these egress mails?

Does anyone else include them?  if so how?

 

I'm not sure asking each indivicual user to go though their egress mails and forward anything on is appropriate? (and if thats the only way then surely that sits outside searchable or indexed infomation?

[Koldov]

I thought the way Egress worked was that you only ever get a 'you have a new Egress message' email.

 

The content of the 'message' is then viewed through the Egress site. So there is no 'other' email to search for or include.

Edited May 13, 2025 by Koldov