SensePost. (2016, August 18). Ruler: A tool to abuse Exchange services. Retrieved February 4, 2019.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1087.003 Email Account |
ToolRuler | Ruler can be used to enumerate Exchange users and dump the GAL. |
| T1137.003 Outlook Forms |
ToolRuler | Ruler can be used to automate the abuse of Outlook Forms to establish persistence. |
| T1137.004 Outlook Home Page |
ToolRuler | Ruler can be used to automate the abuse of Outlook Home Pages to establish persistence. |
| T1137.005 Outlook Rules |
ToolRuler | Ruler can be used to automate the abuse of Outlook Rules to establish persistence. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
