1. Home
  2. Mapping Frameworks
  3. M365 Home
  4. Mail Flow Rules

M365 EOP-MFR-E3 Mappings

EOP mail flow rules take action on messages while they're in transit, before the message is delivered to the mailbox. Mail flow rules contain a rich set of conditions, exceptions, and actions, which provides flexibility to implement many types of messaging policies.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
EOP-MFR-E3 Mail Flow Rules Technique Scores T1114 Email Collection
EOP-MFR-E3 Mail Flow Rules Technique Scores T1114.002 Remote Email Collection
EOP-MFR-E3 Mail Flow Rules Technique Scores T1114.003 Email Forwarding Rule
EOP-MFR-E3 Mail Flow Rules Technique Scores T1564 Hide Artifacts
EOP-MFR-E3 Mail Flow Rules Technique Scores T1564.008 Email Hiding Rules