Contoso Legal LLP
contoso.onmicrosoft.com
Annabel Fraser
annabel.fraser@contoso.example
User mailboxSign-in allowedArchive onForwards outside
Needs attention
3
Worst: high
Size
13.1 GB
26% of 49.5 GB
Others with access
Nobody else
Can open or send from it
Forwarding and rules
Forwards outside, 2 rules to check
Protocols
Modern only
Phones and tablets
1 device
Sync this mailbox
Needs attention
3-
high
All mail is forwarded to annabel.fraser@homemail.example, outside the organisation.Details
-
high
Inbox rule ".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank.Details
-
high
Inbox rule "Copy to home": Forwards to annabel.fraser.home@homemail.example.Details
Open findings
All findings- high
No inbox rules hide mail".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank · since 7 Sep 2026
- high
No mail is forwarded outside the organisationMailbox forwarding to annabel.fraser@homemail.example (keeps a copy) · since 7 Sep 2026
- high
No mail is forwarded outside the organisationInbox rule "Copy to home" forwards to annabel.fraser.home@homemail.example · since 7 Sep 2026
- medium
Admins use phishing-resistant sign-in methodsGlobal Administrator; signs in with Authenticator app · since 7 Sep 2026
- low
No account reports to a blocked managerReports to Bobby Marsh, whose sign-in is blocked · since 7 Sep 2026
Size and growth
13.1 GB
- Size
- 13.1 GB of 49.5 GB (26%)
- Items
- 31,355
- Recoverable deleted items
- 668.9 MB
- Stops sending at
- 49.5 GB
Size by month 2
The last collection of each month.
| Month | Size | Change |
|---|---|---|
| 2026-10 | 13.1 GB | +267.6 MB |
| 2026-09 | 12.8 GB |
+267.6 MB since 7 Sep 2026 (35 days).
Forwarding and inbox rules
Forwards outside, 2 rules to check
- Forwarding set by an admin
- annabel.fraser@
homemail.example (outside the organisation)
Inbox rules 2
| Rule | Enabled | What it does | Why it stands out |
|---|---|---|---|
| . | Yes | body has invoice, payment: move to RSS Feeds; mark as read; stop processing rules | Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank |
| Copy to home | Yes | All messages: forward to annabel.fraser.home@ | Forwards to annabel.fraser.home@ |
Who can open or send from it
Nobody else
No one else has full access, send as or send on behalf.
Protocols and settings
Modern only
- Older protocols allowed
- None
- Mailbox auditing
- On
- Hidden from the address book
- No
- Archive
- On
- Litigation hold
- Off
Legacy sign-ins in the last 30 days 1
Sign-ins with protocols that can't do MFA.
| Client | Succeeded | Failed | Last attempt | From |
|---|---|---|---|---|
| IMAP4 | 0 | 1 | 8 Oct 2026 | RU |
Automatic reply
Off
No automatic reply is on or scheduled.
Phones and tablets syncing it
1 device
| Device | Platform | App | Access | First sync | Last sync |
|---|---|---|---|---|---|
| iPhone 14 | iOS | Mail app (ActiveSync) | Allowed | 9 Apr 2025 | 11 Oct 2026 |
Email activity
Active
- Last email activity
- 11 Oct 2026 (yesterday)
- Sent
- 40
- Received
- 300
- Read
- 300
Counts cover Microsoft's report period (the last 30 days).
History
No changes spotted since 7 Sep 2026.
Found by comparing collections since 7 Sep 2026. The date is when Office Sentry first saw the change.
Data from Mailboxes (), Mailbox size (), Inbox rules (), Automatic replies (), Mobile devices (), Legacy sign-ins (), Users ().