Advanced Exchange Use Cases for Email Security
Explore innovative use cases for enhancing email security in Microsoft Exchange, including detecting new mail target domains, identifying suspicious spammers, monitoring large mail senders, and tracking mail client host changes. Utilize lightweight rules and data monitoring to proactively safeguard against potential threats and enhance overall email security.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Exchange Use Cases Harry Wang APJ Solution Architect July 26, 2016
Use Case List Based on Exchange Message Tracking Log New Mail Target Domain Detection Suspicious Spammer Suspicious large mail sender Mail Client Change Host
Use Case: New Mail Target Domain Detection Using lightweight rule keep the all mail target domain list (self-learning) Detect new mail target domain ( never sent before) based on active list new entry event 3
Use Case: Suspicious Spammer Using data monitor to show the top 20 sender who deliver the same subject of mail to lots of recipients ( not based on number of mail, based on the sum of the recipient in every mail) Based on data monitor audit events, find those sender who exceed the threshold for spammer detection 4
Use Case: Suspicious large mail sender Using data monitor to show the top 20 sender for the accumulated mail size Based on data monitor audit events, find those sender who exceed the threshold for large mail detection 5
Use Case: Mail Client Change Host Keep the mail client host / mail account mapping list by lightweight rule Detect suspicious host who change the mail account (based on active list modify event) 6
Sample Dashboard For Exchange Events Monitoring 7
Thank you 13
