3.0.10 26-12-2023 1 Analytic Rule Modified by adding "GroupMembership" instead of "Admin" condition for better extraction of admin accounts from the identity infotable. 3.0.9 28-11-2023 2 Analytic ...
'Identifies when multiple (more than one) users mailboxes are configured to forward to the same destination. This could be an attacker-controlled destination mailbox configured to collect mail from ...