Northwind Traders
northwindtraders.onmicrosoft.com
Rules to check
3
3 high risk
Forward outside
2
Rules sending mail out
Inbox rules
13
Across 39 mailboxes
3 rules out of 13 across 39 mailboxes forward outside the organisation, delete, or bury mail. These are the classic signs of a compromised mailbox: check each one with the mailbox owner.
| Mailbox | Rule | Enabled | Why it stands out | What it does |
|---|---|---|---|---|
| olivia.smith@ | Invoices to bookkeeper | Yes | Forwards to bookkeeping@ | subject has invoice: forward to bookkeeping@ |
Every rule that forwards or redirects mail, including to colleagues.
| Rule | Enabled | Sends to | Outside the organisation |
|---|---|---|---|
| Copy to home high | Yes | ann.patel.home@ | Yes |
| To manager | Yes | office.manager@ | No |
| Invoices to bookkeeper high | Yes | bookkeeping@ | Yes |
| Mailbox | Rule | Enabled | Conditions | Actions |
|---|---|---|---|---|
| alfie.scott@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| ann.patel@ | . | Yes | body has invoice, payment | move to RSS Feeds; mark as read; stop processing rules |
| ann.patel@ | Copy to home | Yes | All messages | forward to ann.patel.home@ |
| hannah.patel@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| hannah.robinson@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| imogen.edwards@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| info@northwindtraders.example | To manager | Yes | All messages | redirect to office.manager@ |
| olivia.scott@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| olivia.smith@ | Invoices to bookkeeper | Yes | subject has invoice | forward to bookkeeping@ |
| owen.taylor@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| owen.white@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| rhys.moore@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
| zara.jackson@ | Newsletters | Yes | sender has newsletter | move to Newsletters |
Data from Inbox rules (), Mailboxes ().