Tag

#M365

2 articles covering M365 across campaign analysis, detection engineering, and defender tradecraft.

Coverage

2 entries

Field Analysis

Blue TeamDetection & ValidationApr 22, 20269 min read

From User Report to Token Revocation: A 60-Minute M365 Phishing Response Walkthrough

Most M365 phishing incidents are decided in the first hour. This walkthrough lays out a 60-minute response chain from user report to refresh-token revocation and consent reversal.

By PhishPond Desk

#Incident Response
#Entra ID
#Token Theft

Field Analysis

Red TeamDetection & ValidationApr 1, 20266 min read

Mailbox Rule Abuse Returns in Hybrid M365 Environments

Investigators report a rise in hidden forwarding and deletion rules used to suppress fraud conversations after initial compromise.

#M365

Coverage

Browse Other Tags