Office 365 email forwarding rule to external domain

Detects scenarios where an attacker creates a forwarding rules to a non company email in order to collect information.