Disable Mailbox Auditing
Description
disable mailbox auditing module deploys configuration to enable audit log bypass for a target account effectively disabling logging for actions taken by the account on any mailbox.
Trigger
MAAD Attack Arsenal -> "Exchange" -> 5
MITRE ATT&CK Information
| Tactic | Technique |
|---|---|
| Defense Evasion | Impair Defenses |
Additional Details
Revert module changes: Yes
Microsoft services accessed by module:
External PowerShell module used: