Suspicious Email Forwarding Rule Creation

Ankit Mehta@Secvyn

•updated Jun 12, 2026•0•0•3

Detects the creation or modification of inbox rules that forward or redirect emails to another recipient. This can be an indicator of an adversary attempting to exfiltrate emails or maintain persistence.