Hosts receiving high volume of network traffic from email server
Remote Email Collection , Email Collection
Remote Email Collection , Email Collection
File and Directory Permissions Modification , Windows File and Directory Permissions Modification
System Services , Service Execution
PowerShell , Windows Command Shell
DNS , Application Layer Protocol