Fabrikam Dental Group
fabrikam.onmicrosoft.com
Rules to check
3
3 high risk
Forward outside
2
Rules sending mail out
Inbox rules
17
Across 57 mailboxes
3 rules out of 17 across 57 mailboxes forward outside the organisation, delete, or bury mail. These are the classic signs of a compromised mailbox: check each one with the mailbox owner.
| Mailbox | Rule | Enabled | Why it stands out | What it does |
|---|---|---|---|---|
| anna.kowalski@fabrikam.example high | . | Yes | Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank | body has invoice, payment: move to RSS Feeds; mark as read; stop processing rules |
| anna.kowalski@fabrikam.example high | Copy to home | Yes | Forwards to anna.kowalski.home@homemail.example | All messages: forward to anna.kowalski.home@homemail.example |
| thomas.robinson@fabrikam.example high | Invoices to bookkeeper | Yes | Forwards to bookkeeping@ledgerline.example | subject has invoice: forward to bookkeeping@ledgerline.example |
Every rule that forwards or redirects mail, including to colleagues.
| Mailbox | Rule | Enabled | Sends to | Outside the organisation |
|---|---|---|---|---|
| anna.kowalski@fabrikam.example high | Copy to home | Yes | anna.kowalski.home@homemail.example | Yes |
| info@fabrikam.example | To manager | Yes | office.manager@fabrikam.example | No |
| thomas.robinson@fabrikam.example high | Invoices to bookkeeper | Yes | bookkeeping@ledgerline.example | Yes |
| Mailbox | Rule | Enabled | Conditions | Actions |
|---|---|---|---|---|
| aisha.brown@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| amelia.khan@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| anna.kowalski@fabrikam.example high | . | Yes | body has invoice, payment | move to RSS Feeds; mark as read; stop processing rules |
| anna.kowalski@fabrikam.example high | Copy to home | Yes | All messages | forward to anna.kowalski.home@homemail.example |
| arthur.lee@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| callum.turner@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| chloe.jackson@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| henry.roberts@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| info@fabrikam.example | To manager | Yes | All messages | redirect to office.manager@fabrikam.example |
| jack.roberts@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| jack.ward@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| leo.harrison@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| noah.wood@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| owen.scott@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| owen.smith@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| thomas.allen@fabrikam.example | Newsletters | Yes | sender has newsletter | move to Newsletters |
| thomas.robinson@fabrikam.example high | Invoices to bookkeeper | Yes | subject has invoice | forward to bookkeeping@ledgerline.example |
Data from Inbox rules (), Mailboxes ().