jfrmilner · December 17, 2025 13:13
diff --git a/Outlook-AttackSimRule.ps1 b/Outlook-AttackSimRule.ps1
 # Attack simulation training rule - https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-get-started?view=o365-worldwide#simulations
 # Date - 2025-12-17 | Author - jfrmilner
 Connect-ExchangeOnline -Organization 'TenantName.onmicrosoft.com'
 New-InboxRule -Name "AttackSimulation" -MoveToFolder "John.Milner:\Junk Email" -FromAddressContainsWords @("attemplate.com","bankmenia.com","bankmenia.de","bankmenia.es","bankmenia.fr","bankmenia.it","bankmenia.org","banknown.de","banknown.es","banknown.fr","banknown.it","banknown.org","browsersch.com","browsersch.de","browsersch.es","browsersch.fr","browsersch.it","browsersch.org","docdeliveryapp.com","docdeliveryapp.net","docstoreinternal.com","docstoreinternal.net","doctorican.de","doctorican.es","doctorican.fr","doctorican.it","doctorican.org","doctrical.com","doctrical.de","doctrical.es","doctrical.fr","doctrical.it","doctrical.org","doctricant.com","doctrings.com","doctrings.de","doctrings.es","doctrings.fr","doctrings.it","doctrings.org","exportants.com","exportants.de","exportants.es","exportants.fr","exportants.it","exportants.org","financerta.com","financerta.de","financerta.es","financerta.fr","financerta.it","financerta.org","financerts.com","financerts.de","financerts.es","financerts.fr","financerts.it","financerts.org","hardwarecheck.net","hrsupportint.com","mcsharepoint.com","mesharepoint.com","officence.com","officenced.com","officences.com","officentry.com","officested.com","passwordle.de","passwordle.fr","passwordle.it","passwordle.org","payrolltooling.com","payrolltooling.net","prizeably.com","prizeably.de","prizeably.es","prizeably.fr","prizeably.it","prizeably.org","prizegiveaway.net","prizegives.com","prizemons.com","prizesforall.com","prizewel.com","prizewings.com","resetts.de","resetts.es","resetts.fr","resetts.it","resetts.org","salarytoolint.com","salarytoolint.net","securembly.com","securembly.de","securembly.es","securembly.fr","securembly.it","securembly.org","securetta.de","securetta.es","securetta.fr","securetta.it","shareholds.com","sharepointen.com","sharepointin.com","sharepointle.com","sharesbyte.com","sharession.com","sharestion.com","supportin.de","supportin.es","supportin.fr","supportin.it","supportres.de","supportres.es","supportres.fr","supportres.it","supportres.org","techidal.com","techidal.de","techidal.fr","techidal.it","techniel.de","techniel.es","techniel.fr","techniel.it","templateau.com","templatent.com","templatern.com","windocyte.com")
	# Attack simulation training rule - https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-get-started?view=o365-worldwide#simulations
	# Date - 2025-12-17 \| Author - jfrmilner
	Connect-ExchangeOnline -Organization 'TenantName.onmicrosoft.com'
	New-InboxRule -Name "AttackSimulation" -MoveToFolder "John.Milner:\Junk Email" -FromAddressContainsWords @("attemplate.com","bankmenia.com","bankmenia.de","bankmenia.es","bankmenia.fr","bankmenia.it","bankmenia.org","banknown.de","banknown.es","banknown.fr","banknown.it","banknown.org","browsersch.com","browsersch.de","browsersch.es","browsersch.fr","browsersch.it","browsersch.org","docdeliveryapp.com","docdeliveryapp.net","docstoreinternal.com","docstoreinternal.net","doctorican.de","doctorican.es","doctorican.fr","doctorican.it","doctorican.org","doctrical.com","doctrical.de","doctrical.es","doctrical.fr","doctrical.it","doctrical.org","doctricant.com","doctrings.com","doctrings.de","doctrings.es","doctrings.fr","doctrings.it","doctrings.org","exportants.com","exportants.de","exportants.es","exportants.fr","exportants.it","exportants.org","financerta.com","financerta.de","financerta.es","financerta.fr","financerta.it","financerta.org","financerts.com","financerts.de","financerts.es","financerts.fr","financerts.it","financerts.org","hardwarecheck.net","hrsupportint.com","mcsharepoint.com","mesharepoint.com","officence.com","officenced.com","officences.com","officentry.com","officested.com","passwordle.de","passwordle.fr","passwordle.it","passwordle.org","payrolltooling.com","payrolltooling.net","prizeably.com","prizeably.de","prizeably.es","prizeably.fr","prizeably.it","prizeably.org","prizegiveaway.net","prizegives.com","prizemons.com","prizesforall.com","prizewel.com","prizewings.com","resetts.de","resetts.es","resetts.fr","resetts.it","resetts.org","salarytoolint.com","salarytoolint.net","securembly.com","securembly.de","securembly.es","securembly.fr","securembly.it","securembly.org","securetta.de","securetta.es","securetta.fr","securetta.it","shareholds.com","sharepointen.com","sharepointin.com","sharepointle.com","sharesbyte.com","sharession.com","sharestion.com","supportin.de","supportin.es","supportin.fr","supportin.it","supportres.de","supportres.es","supportres.fr","supportres.it","supportres.org","techidal.com","techidal.de","techidal.fr","techidal.it","techniel.de","techniel.es","techniel.fr","techniel.it","templateau.com","templatent.com","templatern.com","windocyte.com")
No results found