Is there some kind of monitoring to detect a hacked exchange account? Maybe based on smtp connections from multiple ips for a single user. Every couple of months we get a hacked account and I don't know about it until the user is innundated with non deliverables. It would be great to have a way to detect that.
↧