Dealing with compromised user accounts 

In today's digital age, online security has become a focal point for individuals and organizations alike. Despite the implementation of robust security measures, cyber-attacks and breaches continue to occur on a daily basis, leaving online accounts vulnerable to be compromised.
In such instances, User Remediation is a crucial process that takes immediate action to safeguard the affected account. This process involves a series of actions aimed at identifying and resolving security breaches to minimize the damage caused.
Let's take a closer look at the measures we take to safeguard a compromised account.
For more info check our website at techtron.co.za/
If an account appears compromised, Remediate User performs the following actions:
1. Block user sign-in
2. Reset user password
3. Disconnect all current sessions
4. Disable all inbox rules for the user
Additional data to check:
1. User devices (including first sync time)
2. Recently added email forwarding rules
3. Recently added users
4. User last logon details
5. Recent password changes
6. Mailbox permission changes
7. Application changes
8. Mailbox logons