Outbound Email with Attachments to External Domains

Subash Ghimire@iamsubashg

•updated Aug 20, 2025•4•0•79

This rule detects outbound email activity, specifically focusing on emails sent outside the organization's domain that include attachments. It identifies the sender, recipient, file type, file name, and file size of these attachments.