Link to Search-Malbox Cmdlet documentation
http://technet.microsoft.com/en-us/library/dd298173(v=exchg.141).aspx
Exchange Search keywords
| Property | Example | Search results |
| Attachments | attachment:annualreport.pptx | Messages that have an attachment named annualreport.pptx. The use of attachment:annualreport or attachment:annual* returns the same results as using the full name of the attachment. |
| Cc | cc:paul shen | Messages with Paul Shen in the Cc field. |
| cc:pauls | ||
| cc:pauls@contoso.com | ||
| From | from:bharat suneja | Messages sent by Bharat Suneja. |
| from:bsuneja | ||
| from:bsuneja@contoso.com | ||
| Keywords in retention policy | retentionpolicy:business critical | Messages that have the Business Critical retention tag applied. |
| Date when messages expire according to policy | expires:4/1/2010 | Messages that expire on April 1, 2010. |
| Sent | sent:yesterday | All messages sent yesterday. |
| Subject | Subject:"patent filing" | All messages where the phrase "patent filing" appears in the Subject field. |
| To | to:"ben smith" | Messages that have Ben Smith in the To field. |
| to:bsmith | ||
| to:besmith@contoso.com |
AQS: http://technet.microsoft.com/en-us/library/bb232132.aspx#
