#34375 Operational | P3 | Microsoft 365 Alert Policy: Creation of forwarding/redirect rule @ Artichoke Consulting - MSP Free

Created from Lead: https://artichoke.shield.syncromsp.com/leads/32024706/convert

[embedded image](https://www.blumira.com/)

Operational | P3 | Microsoft 365 Alert Policy: Creation of forwarding/redirect rule @ Artichoke Consulting - MSP Free

Blumira has detected Microsoft 365 Alert Policy: Creation of forwarding/redirect rule for Artichoke Consulting - MSP Free on 2025-04-25 02:38PM MDT and triggered action Create Informational Finding for Responders.

Analysis:

Per Microsoft's documentation:
[This policy] Generates an alert when someone in your organization creates an inbox rule for their mailbox that forwards or redirects messages to another email account. This policy only tracks inbox rules that are created using Outlook on the web (formerly known as Outlook Web App) or Exchange Online PowerShell. For more information about using inbox rules to forward and redirect email in Outlook on the web, see [Use rules in Outlook on the web to automatically forward messages to another account](https://support.microsoft.com/en-us/office/use-rules-in-outlook-web-app-to-automatically-forward-messages-to-another-account-1433e3a0-7fb0-4999-b536-50e05cb67fed?ui=en-us&rs=en-us&ad=us).
For more information on Microsoft's default alert policies, refer to their documentation [here](https://learn.microsoft.com/en-us/microsoft-365/compliance/alert-policies?view=o365-worldwide#default-alert-policies).
There may be a few ways to find more information in your MS365 portal(s).

- To be taken directly to the Alert Dashboard in the Microsoft 365 portal, use this [link](https://compliance.microsoft.com/compliancealerts)

Or, to manually navigate to the alert: - Browse to Admin Center > Compliance > Alerts
- View the details of the "Creation of forwarding/redirect rule" alert
Investigation, tuning, and management of these alerts should be done within the Microsoft 365 portal.

Finding ID: F-25-16-6179

Finding Data Source: Microsoft365 Compliance
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/6d44dca3-0d61-456b-9eef-18981f6fb2fc/query/findings/61798a4b-0057-8628-9f86-6cd3babe9fd1)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

a6103f62-405b-4341-8b46-4c6cbc2b3032

[embedded image]

Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira