In my previous post, I mentioned I would post the source code for the script that I use to monitor the Exchange message tracking logs in an attempt to find hacked accounts. Attached to this post is the source code. In our environment I look for when the file grows to beyond a GB. At that point, the script will email me. This is run as a scheduled task (sorry, my coding skills don't allow me to make something that runs as a service) every 10 minutes. Enjoy!