MAAD-AF User Exchange Mailbox Access

This module allows an attacker to gain full access rights over another user’s Exchange mailbox.

Module Overview - DRAFT

NOTE TO ENABLEMENT TEAM: We may need to find a more sustainable example to use for lab users and adjust the verbiage below accordingly.

1. From the main Attack Arsenal menu, enter 8 for Gain User Mailbox Access.
   Read through the MITRE information, and press <Enter> to continue.

2. Follow the on-screen prompts in MAAD-AF to give the Michael Scott user full access over Malory Archer’s mailbox.

   • Target Mailbox: Malory Archer

   • Recipient Mailbox: Michael Scott

3. MAAD-AF will prompt the user to undo the actions just created. Select No for the purposes of this exercise.

Validation

Enter the full email address for Malory Archer.