Suspicious Inbox Rule to Hide Mails

karim gi@kappanello

•updated Nov 24, 2025•37•0•288

This query monitors and detects the creation of Outlook rules that move emails to the “Conversation History” or “Deleted Items” folders. The goal is to promptly identify potential attempts to hide suspicious emails by a possible threat actor.