microsoft-365.outlook_email_search high conf mediumOBO
Queries the whole mailbox by sender and date, surfacing contracts, credentials, and confidential correspondence in bulk.
microsoft-365.chat_message_search high conf mediumOBO
Reads private Teams conversations, exposing informal discussions that routinely carry personal data and unreleased business decisions.
microsoft-365.sharepoint_search high conf mediumOBO
Searches documents and pages across every SharePoint site the user can reach, a tenant-wide path to HR, legal, and customer records.
microsoft-365.outlook_send_mail high conf mediumOBO
Transmits mail as the account owner to arbitrary recipients, allowing mailbox contents to leave the tenant under the user's identity.
microsoft-365.outlook_forward_mail high conf mediumOBO
Relays existing internal correspondence to new recipients, a direct exfiltration route for threads the sender never authored.
microsoft-365.outlook_batch_delete_messages high conf mediumOBO
Clears many messages from the active mailbox in one call, which can defeat retention expectations and hide correspondence from reviewers.
microsoft-365.outlook_create_filter high conf mediumOBO
Installs an inbox rule that can silently auto-forward, move, or delete incoming mail, a long-standing account-takeover and evasion technique.
microsoft-365.sharepoint_delete_item high conf mediumOBO
Removes a file or an entire folder tree from a shared library into the recycle bin, cutting off everyone who depends on that content.
All other tools (15)
microsoft-365.outlook_calendar_search medium conf mediumaudit
Reads calendar entries including attendee identities, meeting subjects, and locations that reveal who the user works with.
microsoft-365.outlook_create_draft medium conf mediumaudit
Stages outgoing correspondence in the user's mailbox, ready to be sent under their name by a later action or a distracted human.
microsoft-365.outlook_create_event medium conf mediumaudit
Books a meeting and mails invitations to the named attendees, committing their time and exposing the subject line to every recipient.
microsoft-365.outlook_delete_event medium conf mediumaudit
Cancels a meeting off the organizer's calendar and every attendee's, with no automatic way to reinstate the original booking.
microsoft-365.outlook_delete_filter medium conf mediumaudit
Removes an inbox rule, which can undo mail routing that compliance or security teams put in place.
microsoft-365.outlook_send_draft medium conf mediumaudit
Releases a previously composed draft to its recipients; once transmitted the message cannot be recalled.
microsoft-365.outlook_set_vacation medium conf mediumaudit
Publishes an automatic reply to every inbound sender, including external parties, disclosing absence dates and alternate contacts.
microsoft-365.outlook_trash_thread medium conf mediumaudit
Moves an entire conversation to Deleted Items, pulling the thread out of the active mailbox until someone restores it.
microsoft-365.outlook_update_event medium conf mediumaudit
Changes the time, location, or attendee list of an existing meeting and notifies everyone already invited.
microsoft-365.read_resource medium conf mediumaudit
Resolves any SharePoint file, Outlook message, or Teams chat by URI and pulls its full body and attachments into agent context.
microsoft-365.sharepoint_copy_item medium conf mediumaudit
Duplicates a file or folder into another location, which can land confidential content in a library with looser permissions.
microsoft-365.sharepoint_move_item medium conf mediumaudit
Relocates a file or folder to a different library or site, breaking existing links and shifting the content under a new permission set.
microsoft-365.sharepoint_rename_item low conf mediumallow
Renames a file or folder in place; cosmetic but can break saved references that colleagues rely on.
microsoft-365.sharepoint_update_file medium conf mediumaudit
Overwrites the contents of an existing library file, changing what every downstream reader sees until a prior version is restored.
microsoft-365.sharepoint_upload_file medium conf mediumaudit
Adds a new file to a shared document library, publishing agent-generated content to everyone with access to that site.