[Skunkworks] spam

Hi guys our domain was recently blacklisted,the case was that alot of spam was coming from our side.Is there a way to know the specific user that is sending the spam from my networkWe have a corporate anti virus in this case NOD 32 .Thank you