Skip to content

Glossary: Security Operations and Incident Response

Mail forwarding rule

Also written: forwarding rule, external forwarding rule

A mailbox setting that automatically sends copies of email to another address. Attackers set one up on a phished account to keep reading its mail, as with Sam's rule that forwarded invoices to an outside address.

Where the book teaches it

Related terms

PersistenceThreat hunting