Message platform for automated threat simulation, reporting, detection, and remediation
摘要
說明書
As non-limiting examples, the management server, having been configured to subscribe to one or more user mailbox accounts, may receive multiple types of activity updates. The user activity updates can include, for example, new mail being received, mail being created, mail being deleted, mail being modified, mail being moved, mail being copied.
Example event types that may be monitored include EventType.NewMail, EventType.Created, EventType.Deleted, EventType.Modified, EventType.Moved, EventType.Copied, and EventType.FreeBusyChanged);
The user activity detection can be managed through a management server.
Evidence of user activity is determined from the notifications received from a user account. As examples, three user actions are identified below. A user action is identified, if a notification is associated with the event notification listed in the right column.
