Exchange - logging remote wipes


I got my phone stolen a few months ago. No activity on it since. Then, yesterday I received a mail from our Exchange (2013) telling me the remote wipe was completed successfully.

That - in my eyes - means someone started it up and connected it to a network. Which again means it should be loggable. Firewall logs are more or less useless because of the traffic around the time it was remote wiped. I though there would be logs for this in Exchange, but I find almost no information relevant on neither Google nor here. The notification mail gives me no IP-adresses of the phone when it tried to connect and got wiped.

So - can anyone who is fluent in Exchange security help me track down the IP triggering the remote wipe of my phone? Someone has stolen it, tried to use it and got it wiped. I want to deliver the IP, complete with logs and location tracking to the police. Any info I can get my hands on is useful.

0 Comments   [ + ] Show comments

Answers (0)

Be the first to answer this question

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ