Cloud-based email and calendaring service part of Microsoft 365
1 Data Sources
1 Templates
0 Downloads
Updated 3 days ago
CLI Install (Vendor)
Email-Security
1 Templates
📧 New Inbox Rule Creation
Exchange Online security audit event
Records the creation of new inbox rules in Exchange Online mailboxes. Critical for detecting Business Email Compromise (BEC) attacks and malicious email forwarding.
Frequencyenum.low
JSON
exchange
email
security
audit
microsoft365
bec-indicator
Compliance:
SOC 2
GDPR
HIPAA
PCI DSS
NIST Cybersecurity Framework
Security: High
When Generated:
- When users create new inbox rules via Outlook Web App
- When inbox rules are created programmatically
- During email forwarding setup attempts
- When automated email processing rules are established
Frequency Notes: Low frequency during normal business operations, with spikes during onboarding and organizational changes. Suspicious patterns include off-hours creation and rules targeting financial keywords.
CLI Install