ITM is an open framework - Submit your contributions now.

Insider Threat Matrix™

  • ID: AF027.006
  • Created: 11th August 2025
  • Updated: 11th August 2025
  • Contributor: The ITM Team

Shared Mailbox Deletion

A subject intentionally deletes a shared mailbox that has been used for illegitimate activity - such as Exfiltration via Corporate Email, distribution of unsolicited bulk messages, or staging of sensitive data - with the purpose of denying access to investigators.