Patent ID: 7979494
Filing Date: 2011-07-12
Classification: G06F,H04L

Abstract:
1. A method for auditing messaging activity in an exchange server electronic messaging system, the method comprising: automatically examining, in real-time, a plurality of messaging events generated during operation of an exchange server electronic messaging service, wherein the automatically examining is performed by adding a hook to the exchange server electronic messaging service, the hook executing in one or more computer processors, wherein the hook is configured to detect a request by a user to access a mailbox and to obtain data associated with the request; detecting from the plurality of messaging events a request by a user to access a mailbox associated with the exchange server electronic messaging service; obtaining data associated with the request wherein the data comprises a type of access performed by the user and an identify of the user; comparing the identity of the user with an identity of the mailbox owner; automatically determining whether the type of access performed by the user with respect to the mailbox is changing at least one permission of a folder associated with the mailbox; and when the type of access is changing at least one folder permission, issuing an alert when the identity of the user is not the same as the identity of the mailbox owner, the alert reporting information on the particular mailbox accessed, the identity of the user, a path to the folder in the mailbox, a folder name, one or more new folder permission values, and one or more old folder permission values with respect to the mailbox.