[nsp-sec] Pwned IMAP accounts searches.

[RuthAnne Bevier]

On Mon, Jul 26, 2021 at 10:56:33AM +1000, Scott A. McIntyre wrote:
> Sure, please do - I'm sure they can make good use of it!
> 

Well, I feel quite stupid asking this, but: how are you seeing these search terms?  We're running O365 and our logs don't appear to be granular enough to provide this information.  Ultimately we'll be disabling IMAP access entirely, which will solve this particular problem.


-- 
RuthAnne Bevier
Senior Information Security Advisor
California Institute of Technology
626 395 2671