Searches for mailbox forwarding and inbox rules that forward to external recipients. Option to send a CSV report over email. Designed for execution in Azure Automation. Check out the GitHub Repo for more information: https://github.com/soren-cloud/ExO-MailboxAndInboxRuleForwardingReport

A Microsoft 365 incident response and investigation powershell module with a focus on email phishing attacks. Redkite is designed to check ExchangeOnline for common indicators of compromised email accounts. The checks look at mailbox rules that are commonly put in place by malicious actors to obfuscate their activity. The data is provided in a CS... More info