Param([string]$Sender)

# If no sender address was specified, prints syntax and exits.
if (($Sender -eq $Null) -or ($Sender -eq “”) -or ($Sender -notlike “*@*.*”)) {
write-host ” “
write-host “Syntax: Get_Sender <email@domain.com>”
write-host ” “
break
}

# Gets a list of all hub transport servers in the organization.
[array]$HubServers = @()
$HubServers = Get-TransportServer
$Count=0

# Checks log files on each hub transport server for the sender and saves results.
$Results = foreach ($Name in $HubServers) {
[string]$Server = $HubServers[$Count].Name
Get-MessageTrackingLog -Server $Server -Sender $Sender -ResultSize Unlimited `
-EventID Receive | Select Timestamp, ClientIP, ClientHostname, ServerHostName, `
{$_.Recipients}, RecipientCount, MessageSubject
$Count=$Count+1}

if ($Results) {
$Results | export-csv “C:\temp\sender-report.csv” -NoTypeInformation
write-host ” “
write-host “Messages from $Sender found.”
write-host “Output saved to c:\temp\sender-report.csv”
write-host ” “
}
else {
write-host ” “
write-host “Sorry. I found no messages from $Sender.”
write-host ” “
}