| elastic |
Google Workspace Gmail Routing or Forwarding Rule Created or Modified |
production |
2026-09-18 |
| elastic |
M365 Exchange Mail Flow Transport Rule Created |
production |
2026-09-18 |
| elastic |
M365 Exchange Inbox Forwarding Rule Created |
production |
2026-09-18 |
| splunk |
O365 Email Suspicious Behavior Alert |
production |
2026-05-13 |
| splunk |
O365 Email New Inbox Rule Created |
production |
2026-05-13 |
| splunk |
O365 Email Transport Rule Changed |
production |
2026-05-13 |
| splunk |
O365 Mailbox Email Forwarding Enabled |
production |
2026-05-13 |
| splunk |
O365 New Email Forwarding Rule Created |
production |
2026-05-13 |
| splunk |
O365 New Email Forwarding Rule Enabled |
production |
2026-05-13 |
| sigma |
Google Workspace Out Of Domain Email Forwarding |
experimental |
2026-04-28 |
| sigma |
Mail Forwarding/Redirecting Activity Via ExchangePowerShell Cmdlet |
experimental |
2026-03-01 |
| sigma |
Inbox Rules Creation Or Update Activity Via ExchangePowerShell Cmdlet |
experimental |
2026-02-10 |
| sigma |
Inbox Rules Creation Or Update Activity in O365 |
experimental |
2026-01-09 |
| sigma |
Mail Forwarding/Redirecting Activity In O365 |
test |
2024-11-17 |
| sigma |
Suspicious Inbox Forwarding Identity Protection |
test |
2023-09-03 |