Can you determine which device an email was deleted from?
O365 is in use, and there are no logs available (Azure or O365 logs). If a user connected their account to Outlook for Windows, Outlook for Mac, and their iPhone and started deleting emails, could you determine from which device they were deleted from?
Thank you in advance for any help.
in my view , in such you may request the help desk / legal department of Microsoft
Also, post your query at Microsoft Community Forum for legal advise in this issue. They may have logs in their servers.