ATT&CK technique
View on MITRE ATT&CK →
T1564.008
Email Hiding Rules
Stealth
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | O365 BEC Email Hiding Rule Created | production | 2026-09-22 |
| elastic | M365 Exchange Inbox Rule with Obfuscated Name | production | 2026-09-18 |
| elastic | M365 Exchange Inbox Phishing Evasion Rule Created | production | 2026-09-18 |
| splunk | O365 Email New Inbox Rule Created | production | 2026-05-13 |
| splunk | O365 Email Transport Rule Changed | production | 2026-05-13 |
| sigma | Mail Forwarding/Redirecting Activity Via ExchangePowerShell Cmdlet | experimental | 2026-03-01 |
| sigma | Inbox Rules Creation Or Update Activity Via ExchangePowerShell Cmdlet | experimental | 2026-02-10 |
| sigma | Inbox Rules Creation Or Update Activity in O365 | experimental | 2026-01-09 |
| sigma | Mail Forwarding/Redirecting Activity In O365 | test | 2024-11-17 |