# MAAD-AF User Exchange Mailbox Access This module allows an attacker to gain full access rights over another user's Exchange mailbox. ## Module Overview - DRAFT **NOTE TO ENABLEMENT TEAM:** We may need to find a more sustainable example to use for lab users and adjust the verbiage below accordingly. 1. From the main Attack Arsenal menu, enter `8` for `Gain User Mailbox Access`. Read through the MITRE information, and press `` to continue. 2. Follow the on-screen prompts in MAAD-AF to give the Michael Scott user full access over Malory Archer's mailbox. - Target Mailbox: **Malory Archer** - Recipient Mailbox: **Michael Scott** 3. MAAD-AF will prompt the user to undo the actions just created. Select `No` for the purposes of this exercise. ## Validation Enter the full email address for Malory Archer.