| Event Id | 1211 |
| Source | MSExchangeIS |
| Description | User <user name> used ROWLIST_REPLACE to delete all rules in folder <folder name>. <value> rules got deleted and <value> rules were added. |
| Event Information | No user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.