RedKite

A Microsoft 365 incident response and investigation powershell module with a focus on email phishing attacks. Redkite is designed to check ExchangeOnline for common indicators of compromised email accounts. The checks look at mailbox rules that are commonly put in place by malicious actors to obfuscate their activity. The data is provided in a CS... More info