Find and Delete Email Messages

We had some malware sneak through our email security this morning.  Here’s how I deleted those messages.

Connect to the Compliance area of 365:

$UserCredential = Get-Credential

PS U:\> $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri -Credential $UserCredential -Authentication Basic -AllowRedirectio

Import-PSSession $Session

Find the messages and view the results (I was able to search by subject but there are other options):

 New-ComplianceSearch -Name “Remove Phishing Message” -ExchangeLocation all -ContentMatchQuery ‘subject:”TOP URGENT”‘

 Start-ComplianceSearch -Name “Remove Phishing Message”

Get-ComplianceSearch -identity “Remove Phishing Message” | fl

Delete the messages:

New-ComplianceSearchAction -SearchName “Remove Phishing Message” -Purge -PurgeType SoftDelete

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s