Correlating Suspicious Sign-ins with New Mailbox Forwarding Rules

Bi Yue Xu@biyuexu

•updated Sep 13, 2026•5•0•10

This query identifies suspicious sign-in followed by the creation of a mail forwarding rule.