| Event Id | 1009 |
| Source | MSExchangeIS Private |
| Description | DOMAIN\User1 logged on as /o=ORG/ou=SITE/cn=Recipients/cn=User1 |
| Event Information | According to Microsoft: This Event message indicates that a Windows NT account has logged into a particular Exchange Server mailbox: |
| Reference Links | How to View Windows NT Accounts that Access Mailboxes in Exchange Server XADM: How to Log Mailbox Access by Computer Name |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.