Rule Info
Name
Google Workspace Out Of Domain Email Forwarding
Author
Tom kluter
Description
Detects automatic email forwarding to external domains in Google Workspace, which may indicate data leakage or misuse.
Date
2026-04-28 00:00:00
Modified
None
Id
2a0bb2dd-eb5f-4517-8cb9-404f8ba764a5
Tags
attack.t1114.003 attack.collection
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Tom Kluter
Merge PR #5409 from @Luke57 - Add New Google Workspace Related Rules
2026-04-28
Scan your endpoints, forensic images or collected files with our portable scanner THOR