Suspicious Inbox Manipulation Rules — Detection Rule

Detects suspicious rules that delete or move messages or folders are set on a user's inbox.

Read the full analysis on IntelFusions