O365 Suspicious Admin Email Forwarding
Description
This search detects when an admin configured a forwarding rule for multiple mailboxes to the same destination.
Content Mapping
This content is not mapped to any local saved search. Add mapping
Search |
---|
Open in Search |