Since you're using ADU&C you could change the auditing configuration in a GPO and find a tool to consolidate the security logs from each machine. Admittedly I have little to no experience in log ...
We have a public folder that is used by outside contacts to notify us of changes in service or repair requests. Users are complaining that mail is disappearing out of this folder. There are not rules ...