Google Workspace Out Of Domain Email Forwarding

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•5•0•2

Detects automatic email forwarding to external domains in Google Workspace, which may indicate data leakage or misuse.