Kali365 - Automated Mailbox Sweeping (T1114.002)
Tracks the Kali365 tool iterating through the victim's inbox, performing mass mail item reads or API-driven exports of mailbox contents.
Microsoft Sentinel (KQL)

Tracks the Kali365 tool iterating through the victim's inbox, performing mass mail item reads or API-driven exports of mailbox contents.

Already have an account?