Mail Injection script and basic message trace.

This is a how-to video on how to inject mail into a mailbox using smtp.office365.com. Then how to do a basic message trace and get message trace details. #Check for an existing Authentication Policy allowing basic auth through smtp Get-AuthenticationPolicy | Select-Object -Property Name, AllowBasicAuth* New-AuthenticationPolicy -Name "Allow basic auth" -AllowBasicAuthSmtp:$True | Out-Null Get-AuthenticationPolicy -Identity "Allow basic auth" | Select-Object -Property Name, AllowBasicAuth* Get-User | select Displayname, AuthenticationPolicy Set-User "USER NAME" -AuthenticationPolicy "Allow basic auth" Get-User "USER NAME" | Select-Object -Property AuthenticationPolicy Get-TransportConfig | Format-List SmtpClientAuthenticationDisabled Set-TransportConfig -SmtpClientAuthenticationDisabled $FALSE Set-TransportConfig -SmtpClientAuthenticationDisabled $TRUE Get-CASMailbox -Identity "USER NAME" | Select-Object -Property SmtpClientAuthenticationDisabled Set-CASMailbox -Identity "USER NAME" -SmtpClientAuthenticationDisabled $FALSE Set-CASMailbox -Identity "USER NAME" -SmtpClientAuthenticationDisabled $TRUE #Populate sender variable [STRING]$Sender = "[email protected] #Populate receiver variable [STRING]$Recipient = "RECIPIENT@"DOMAIN.COM #Make array for how many message are to be sent [Array]$Subjects = @(1..500) #Create a string for the message that will be in the body of the email [STRING]$Body = "Email Generated by PowerShell Script for Demo" #Set the server variable to smtp.office365.com if on exchange server set to MX record [STRING]$Server = "smtp.office365.com" #Set user name variable will be used for authentication [STRING]$User = "SENDER@"DOMAIN.COM #Set users password variable for authentication $PWord = ConvertTo-SecureString -String "SENDER PASSWORD" -AsPlainText –Force $Credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $PWord ForEach ($Subject IN $Subjects){ Send-MailMessage -To $Recipient -From $Sender -Subject $Subject –Body $Body -SmtpServer $Server -Credential $Credential -UseSsl –Port 587 Start-Sleep –Seconds 5 $Subject } Get-MessageTrace -SenderAddress "[email protected]" -RecipientAddress "[email protected]" -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" Get-MessageTrace -SenderAddress "[email protected]" -RecipientAddress "[email protected]" -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status None Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status GettingStatus Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status Failed Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status Pending Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status Delivered Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status Expanded Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status Quarantined Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" -Status FilteredAsSpam Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" | Where-Object {$_.RecipientAddress -LIKE "*@domain.com"} Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" | Where-Object {$_.SenderAddress -LIKE "*@domain.com"} Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" | Where-Object {$_.Subject -LIKE "*SUBJECT OF MESSAGE*"} Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" | Where-Object {$_.ToIP -LIKE "*IP ADDRESS*"} Get-MessageTrace -StartDate "mm/dd/yyyy" -EndDate "mm/dd/yyyy" | Where-Object {$_.FromIP -LIKE "*IP ADDRESS*"} Get-MessageTrace -SenderAddress "*@DOMAIN.COM" -StartDate "08/04/2023" -EndDate "8/15/2023" Get-MessageTrace -RecipientAddress "*@DOMAIN.COM" -StartDate "08/04/2023" -EndDate "8/15/2023" Get-MessageTrace -SenderAddress "*@INTERNALDOMAIN.COM" -RecipientAddress "*@INTERNALDOMAIN.COM" -StartDate "08/04/2023" -EndDate "8/15/2023" Get-MessageTrace -SenderAddress "SENDER@"DOMAIN.COM -RecipientAddress "RECIPIENT@"DOMAIN.COM" Get-MessageTrace -SenderAddress "SENDER@"DOMAIN.COM" -RecipientAddress "RECIPIENT@"DOMAIN.COM" -StartDate "09/15/2023" -EndDate "09/17/2023" Get-MessageTrace -SenderAddress "SENDER@"DOMAIN.COM" -RecipientAddress "RECIPIENT@"DOMAIN.COM" -StartDate "09/15/2023" -EndDate "09/17/2023" | Where-Object {$_.Subject -LIKE "1"} Get-MessageTrace -SenderAddress "SENDER@"DOMAIN.COM" -RecipientAddress RECIPIENT@"DOMAIN.COM" -StartDate "09/15/2023" -EndDate "09/17/2023" | Where-Object {$_.Subject -LIKE "1"} | Get-MessageTraceDetail Get-MessageTraceDetail -MessageTraceId "d5d65627-cd3f-41c2-e0db-08dbb650eddb" -SenderAddress "SENDER@"DOMAIN.COM" -RecipientAddress "RECIPIENT@"DOMAIN.COM" Get-MessageTraceDetail -MessageTraceId "d5d65627-cd3f-41c2-e0db-08dbb650eddb" -SenderAddress "SENDER@"DOMAIN.COM" -RecipientAddress "RECIPIENT@"DOMAIN.COM" | Format-List