Using Microsoft 365 Auditing and Alerts to Monitor Email Forwarding
Microsoft 365 auditing makes lots of data available to administrators to help them understand what happens in a tenant. When attackers try to compromise accounts, they can leave fingerprints behind in audit data. Being aware of what you might find in the data helps suppress BEC attacks.
April 4, 2023