New Exchange Transport Rule Created

Ankit Mehta@Secvyn

•updated Jun 13, 2026•2•0•4

This rule detects the creation of new transport rules within Exchange Online. Adversaries may create malicious transport rules to forward emails, bypass security controls, or exfiltrate data. Monitoring the creation of new transport rules can help identify suspicious activity.