[EX2013] Filtering mailbox audit log
Search-MailboxAuditLog margaery -ShowDetails | fl Operation,LogonType,DestFolderPathName,Folder
PathName,ClientIPAddress,MailboxOwnerUPN,LogonUserDisplayName,SourceItemSubjectsList,MailboxResolvedOwnerName,LastAccess
ed