• Log into Mimecast Administration Console.




  • On the top bar click on the Administrator drop down.



  • Click on the Message Center button.

  • From the options click on Message Tracking.



  • Fill in relevant information to find email in question. Search for Sender email or the recipent email.  Be sure to set the date range to cover when the email would have been sent.

  • On the results page you will be able to filter by subject. The list of users who the email was sent to will be on this page.


  • Locate the email from your search page and click on it.  Clicking on email will bring the message details.  Click on the Transmission Data.



  • At the bottom of the transmission page is the Transmission Components.  Look for Email Attachment and pull the Hash from there.