Mail bomb burst to single mailbox followed by external Teams IT support chat

ills3c Intel&Coffee@Ills3C

•updated yesterday•0•0•3

Detects a mail bombing pattern where a recipient receives a burst of inbound emails from many distinct senders within a short time window, followed by a Microsoft Teams message or chat creation from the same user context shortly after.