Investigate suspected email account takeovers by examining audit logs, sign-ins, inbox rules, and app permissions. Identify suspicious forwarding, unlikely travel between sign-ins, and unusual access, then summarize findings and recommended containment actions in a severity-rated report.
- Investigating suspected business email compromise
- Checking for suspicious external forwarding rules
- Reviewing unusual sign-ins and app permissions
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Investigate Office 365 account compromise by reviewing audit logs, email forwarding rules, mailbox permissions, and application access grants. Produce a JSON report with risk scores and a timeline showing suspicious activity and affected mailboxes.
- Investigating suspicious email forwarding
- Reviewing mailbox delegation changes
- Checking suspicious application access grants
mukul975/Anthropic-Cybersecurity-Skills☆ 34.7KUpdated Aug 31, 2026
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Parse Office 365 Unified Audit Logs via Microsoft Graph API to tespit etmeemail forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.
The English summary is being prepared. Showing the original description.
MustafaKemal0146/fetih☆ 5Updated Oct 11, 2026
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026