S0358 Ruler

toolEnterprise

platformsWindows · Office Suite

also known asRuler

Ruler is a tool to abuse Microsoft Exchange services. It is publicly available on GitHub and the tool is executed via the command line. The creators of Ruler have also released a defensive tool, NotRuler, to detect its usage.

techniques used (4)

ATT&CK techniques this enables or maps to.

T1087.003Email Account
T1137.003Outlook Forms
T1137.004Outlook Home Page
T1137.005Outlook Rules

used by groups (1)

Threat groups associated with this.

G0064APT33

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan