This is an action that always deserves to be checked because it could be evidence of an attacker attempting to exfiltrate email. The owner of the mailbox that created the inbox rule was on vacation and uncontactable, and the rule redirected messages to a Gmail account. Good Use of Microsoft 365 Auditing Can Halt Business Email Compromise AttemptsĪ recent Twitter discussion about how an administrator should react to finding an audit record for the New-InboxRule cmdlet was interesting. ![]() The Ongoing Challenge of Keeping Tenants Secure.Stop Forwarding to Suppress a BEC Tactic.Good Use of Microsoft 365 Auditing Can Halt Business Email Compromise Attempts.
0 Comments
Leave a Reply. |