Deleted Emails

Hi All,

I had a strange issue today where a user reported emails missing. checked the recovery folder and found tons of emails deleted on 7/12/2019 2:00AM in the morning (Central Time).

We have Implemented MRM Policy but as per the user the folder was in 7 year retention.

if there any way from exchange side or using MCAPI tool to see what happen at 2:00AM on that day...

thanks

Zak

ZakBhai