value:  Ke3chang used a .NET tool to dump data from Microsoft Exchange mailboxes. ;; Leafminer used a tool called MailSniper to search through the Exchange server mailboxes for keywords. ;; LightNeuron collects Exchange emails matching rules specified in its configuration. ;; MailSniper can be used for searching through email in Exchange and Office 365 environments. ;; Some SeaDuke samples have a module to extract email from Microsoft Exchange servers using compromised credentials. ;; UNC2452 collected emails from specific individuals such as executives and IT staff using New-MailboxExportRequest followed by Get-MailboxExportRequest. ;; Valak can collect sensitive mailing information from Exchange servers including credentials and the domain certificate of an enterprise.
name: Email Collection: Remote Email Collection