NotRuler
NotRuler is a tool for Exchange Admins to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler.
NotRuler
NotRuler is a tool for Exchange Admins to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler.
NotRuler Description
NotRuler is a tool that allows Exchange Admins to remotely interact with Exchange servers to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler. It provides the ability to query Exchange mailboxes, check for compromise, extract stager addresses for malicious rules, extract VBScript used in forms, and check for 'homepage' and extract URLs. The tool has compiled binaries for Linux, OSX, and Windows, with information on setting up from source available in the getting-started guide. NotRuler operates in two modes: Rules to check for client-side rules, Forms to check for VBScript enabled forms, and Homepage to check for a custom homepage.
NotRuler FAQ
Common questions about NotRuler including features, pricing, alternatives, and user reviews.
NotRuler is NotRuler is a tool for Exchange Admins to detect client-side Outlook rules and VBScript enabled forms, aiding in the detection of attacks created through Ruler.. It is a Security Operations solution designed to help security teams with Rules, Attack Detection, Microsoft 365.
