Supportartikel WithSecure Elements Collaboration Protection

Spam email getting through even if Elements Collaboration Protection is in use
What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection.
Elements Collaboration Protection: Breach detected time is recorded differently with actual occurred time in portal
What time is the scheduled report generated in Collaboration Protection?
The detection made from an old mail in Elements Collaboration Protection
How can admin recover or release quarantined emails directly preventing the email from being sent to the original recipient?
Can we integrate Microsoft Sentinel (SIEM) with Elements Collaboration Protection?
Why users/recipients who is not aware of the quarantined email is not been notified on Elements Collaboration Protection?
How does Elements Collaboration Protection subscription usage work?
How to configure Cloud Protection for Microsoft 365 compromised accounts to notify administrator only if found compromised?

What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection.

Issue:

What is "suspicious hidden inbox rules" option on inbox rule scanning feature in Collaboration Protection.

Resolution:

Detect suspicious inbox rule where attacker tries to move content between hidden folders to remain undetected.
Attackers use these kinds of rules to manipulate the original mailbox user, remain undetected in the mailbox, and may simultaneously perform internal phishing campaigns using the compromised mailbox.

Article no: 000042710