So,
I would like to parse Agent Log for actions of Attachment Filter. Actually, I would create a PowerShell script that would send detailed information about Attachment Filter actions to administrator (me). I have already managed to create reports about actions caused by IP Block List Providers, so it should be similar.
I am aware of:
http://technet.microsoft.com/en-us/library/aa997139.aspx
I need information:
Where are Attachment Filter Agent Logs located on disk?
If it is located in AgentLogYYYYMMDD-nn.LOG file(s) how can I search for Attachment Filter actions (e.g. stripped attachment)?
Thanks!