Hello, Private and Confidential, I am currently carrying out a work investigation. 2 emails appear to have been sent according to the email logs on office 365. I have genuine doubts of there legitimacy. Is there anyway that any ITsupport administrator can alter the logs and are their any markers I can look for to look for authentication? A speedy response in writing would be appreciated. Many Thanks Stephen