Inbox Rule with Special Characters Only

Ibrahim Saud@tektrix

•updated Jun 18, 2026•1•0•6

Detects the creation or modification of an inbox rule in Microsoft 365 where the rule's name consists entirely of special characters. This behavior can be indicative of an adversary attempting to evade detection by obscuring malicious inbox rules.