Vendor: ManageEngine

June 14, 2023 · View on GitHub

Product: PAM360

Use-Case: Data Leak

RulesModelsMITRE ATT&CK® TTPsEvent TypesParsers
30111
Event TypeRulesModels
app-activityT1114.003 - Email Collection: Email Forwarding Rule
EM-InRule-EX: User has created an inbox forwarding rule to forward email to an external domain email
EM-InRule-Public: User has created an inbox forwarding rule to forward email to a public email domain
EM-InRule-Fin: User has created an inbox forwarding rule to forward emails containing financial keywords