Data Source
EmailEvents
6 queries tagged with this data source.
-
Email & Phishing
External Email Accounts Synced To Outlook Sending Attachments
Employees using Outlook on corporate machines to send email via third-party SMTP servers, with attachments — a common data-exfiltration pattern.
-
Email & Phishing
Top Blocked Malware Email Events
Top blocked malware email events. Does what it says on the tin.
-
Email & Phishing
Top Phishing Domains
Top phishing *sender domains* with severity categorized by volume.
-
Email & Phishing
Top Phishing Sender Recipient Pairs
Top phishing volume grouped by *(recipient, sender-domain)* pair — useful for spotting targeted campaigns against specific users.
-
Email & Phishing
Top Phishing Targets
Top *recipients* of phishing emails (targeted individuals) with severity by volume.
-
Hunting
Hunt Outlook Calendar C2 Far Future Standing Meeting
Project CAV3RN's Outlook calendar C2 — standing meetings scheduled decades in the future in fixed low-attention windows, carrying operator-agent traffic in the event body.