Northwind Traders
northwindtraders.onmicrosoft.com
Ann Patel
ann.patel@northwindtraders.example
User mailboxSign-in allowedArchive onForwards outside
Needs attention
3
Worst: high
Size
7.3 GB
15% of 49.5 GB
Others with access
Nobody else
Can open or send from it
Forwarding and rules
Forwards outside, 2 rules to check
Protocols
Modern only
Phones and tablets
1 device
Sync this mailbox
Needs attention
3Open findings
All findings- high
No inbox rules hide mail".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank · since 7 Sep 2026
- high
No mail is forwarded outside the organisationMailbox forwarding to ann.patel@homemail.example (keeps a copy) · since 7 Sep 2026
- high
No mail is forwarded outside the organisationInbox rule "Copy to home" forwards to ann.patel.home@homemail.example · since 7 Sep 2026
- medium
Admins use phishing-resistant sign-in methodsGlobal Administrator; signs in with Authenticator app · since 7 Sep 2026
- low
No account reports to a blocked managerReports to Robert Hughes, whose sign-in is blocked · since 7 Sep 2026
Size and growth
7.3 GB
- Size
- 7.3 GB of 49.5 GB (15%)
- Items
- 17,495
- Recoverable deleted items
- 373.2 MB
- Stops sending at
- 49.5 GB
Size by month 2
The last collection of each month.
| Month | Size | Change |
|---|---|---|
| 2026-10 | 7.3 GB | +149.3 MB |
| 2026-09 | 7.1 GB |
+149.3 MB since 7 Sep 2026 (35 days).
Forwarding and inbox rules
Forwards outside, 2 rules to check
- Forwarding set by an admin
- ann.patel@homemail.example (outside the organisation)
Inbox rules 2
| Rule | Enabled | What it does | Why it stands out |
|---|---|---|---|
| . | Yes | body has invoice, payment: move to RSS Feeds; mark as read; stop processing rules | Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank |
| Copy to home | Yes | All messages: forward to ann.patel.home@ | Forwards to ann.patel.home@ |
Who can open or send from it
Nobody else
No one else has full access, send as or send on behalf.
Protocols and settings
Modern only
- Older protocols allowed
- None
- Mailbox auditing
- On
- Hidden from the address book
- No
- Archive
- On
- Litigation hold
- Off
Legacy sign-ins in the last 30 days 1
Sign-ins with protocols that can't do MFA.
| Client | Succeeded | Failed | Last attempt | From |
|---|---|---|---|---|
| IMAP4 | 0 | 1 | 8 Oct 2026 | RU |
Automatic reply
Off
No automatic reply is on or scheduled.
Phones and tablets syncing it
1 device
| Device | Platform | App | Access | First sync | Last sync |
|---|---|---|---|---|---|
| iPhone 14 | iOS | Outlook app | Allowed | 15 Dec 2025 | 10 Oct 2026 |
Email activity
Active
- Last email activity
- 11 Oct 2026 (yesterday)
- Sent
- 40
- Received
- 300
- Read
- 300
Counts cover Microsoft's report period (the last 30 days).
History
No changes spotted since 7 Sep 2026.
Found by comparing collections since 7 Sep 2026. The date is when Office Sentry first saw the change.
Data from Mailboxes (), Mailbox size (), Inbox rules (), Automatic replies (), Mobile devices (), Legacy sign-ins (), Users ().