Oct 12 2018 12:22 AM
we have start receiving "A low-severity alert has been triggered" alerts today ?
is this normal ?
A low-severity alert has been triggered
Creation of forwarding/redirect rule
Severity: ? Low
Time: 10/12/2018 7:30:00 AM (UTC)
Activity: MailRedirect
User: username@xxxxx.com.sg
Details: MailRedirect. This alert is triggered whenever someone gets access to read your user's email.
Investigate
Oct 12 2018 12:32 AM
This means someone in the organization set up an forwarding rule ,auto forwarding or forwarding mail flow rule. You can check and further investigate this in:
Security and Compliance Center - "Alerts"
Also the alert polices can be configured under "alert policies"
Adam
Oct 12 2018 10:19 AM
Just adding a link to the documentation on Alert policies, where you can find all the needed details: https://docs.microsoft.com/en-us/office365/securitycompliance/alert-policies
As noted there, some alerts (such as the forwarding one) are included and turned on by default for every Enterprise plan.
Oct 13 2018 11:50 AM
Oct 14 2018 06:26 PM
Aug 22 2020 05:12 AM
@Kin Mun Yeow : Wie kann ich diese automatische Umleitung deaktivieren?