Identity and Access Security
Malicious Email Forwarding Rules: Detection and Response
Malicious email forwarding rule detection correlates rule changes, destinations, sign-ins, message traces, mailbox access, audit evidence, and persistence.