Know when a Microsoft 365 account needs attention.
Vigil Alerts brings sign-in activity and mailbox changes into a focused review workflow for IT teams and managed service providers.
An attacker with access to a mailbox may create a forwarding rule, hide incoming messages or change who can access the account. Those changes can be easy to miss during day-to-day administration.
Monitor the activity behind an alert
Vigil Alerts helps your engineers review suspicious sign-ins, new and modified inbox rules, external forwarding and mailbox delegation changes. The aim is to make relevant activity easier to investigate across the customers you manage.
Keep the investigation in your hands
The platform monitors and alerts. It does not automatically disable accounts, delete rules or change tenant settings. Your team assesses the evidence and carries out any response through its existing procedures.
Where to start
Start with the events that are most relevant to your customers. Mailbox rule changes can help explain missing messages. Sign-in context can help establish whether the account owner recognises a session. Neither should be treated as proof of compromise on its own.
See whether Vigil Alerts fits your team
Tell us how many tenants you manage and how your engineers currently review Microsoft 365 security events.