Detecting Hidden Inbox Rules in Exchange Online
Inbox rules in Exchange Online help automate email management — forwarding messages, organizing folders, or flagging items. But there’s a lesser-known risk: some inbox rules are hidden from standard PowerShell queries. These can be used for legitimate purposes — like automatic replies — but can also be abused by threat actors.