Skip to content

Hide Navigation Hide TOC

Google Workspace Out Of Domain Email Forwarding (2a0bb2dd-eb5f-4517-8cb9-404f8ba764a5)

Detects automatic email forwarding to external domains in Google Workspace, which may indicate data leakage or misuse.

Cluster A Galaxy A Cluster B Galaxy B Level
Google Workspace Out Of Domain Email Forwarding (2a0bb2dd-eb5f-4517-8cb9-404f8ba764a5) Sigma-Rules Email Forwarding Rule - T1114.003 (7d77a07d-02fe-4e88-8bd9-e9c008c01bf0) Attack Pattern 1
Email Collection - T1114 (1608f3e1-598a-42f4-a01a-2e252e81728f) Attack Pattern Email Forwarding Rule - T1114.003 (7d77a07d-02fe-4e88-8bd9-e9c008c01bf0) Attack Pattern 2