Extract all external emails received by the organization containing .doc

Hi,

How do I get all external emails received by the organization containing .doc in the last 30 days. (We have a HYBRID setup with all our users in the cloud)

Is there a Powershell command that can get these details. If I were to run Get-MessageTrace can I filter on attachment type and/or external sender?