address #29 in the baseline document

cisagov · Jul 25, 2023 · f3762b5 · f3762b5
1 parent 326cedf
commit f3762b5
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/baselines/exo.md b/baselines/exo.md
@@ -958,16 +958,12 @@ At a minimum, the following alerts SHALL be enabled:
 
   - Suspicious Email Forwarding Activity.
 
-  - Unusual increase in email reported as phish.
-
   - Messages have been delayed.
 
   - Tenant restricted from sending unprovisioned email.
 
   - Tenant restricted from sending email.
 
-  - Malware campaign detected after delivery.
-
   - A potentially malicious URL click was detected.
 
 - _Rationale:_ Potentially malicious or service impacting events may go undetected