Out-of-office messages often contain key information about how long the person will be out of the office, where they might be going, or their office location. The best attackers already know about you and your organization from LinkedIn and Facebook. They wont care if you are in the office because they plan to attack you quietly. They may, in fact, attack your organization during a busy time as the events in the logs will be buried with all the other normal traffic. You can also use. PowerShell to determine when people set up an out-of.office message inside the firm.”]
Source: https://www.csoonline.com/article/3505941/how-to-protect-your-business-from-holiday-attacks.html