Detect inbound emails exhibiting a pattern of excessive unsolicited outreach: there are at least two prior threads and every prior message is a self-reply from the same sender, the current message is not a forwarded item, and there is a calendar invite attachment (ICS) with a generic online-meeting location. The rule analyzes attachments, headers, and content to identify this pattern and uses a (beta) ICS parsing capability to extract events and verify the location indicates an online meeting. This indicates potential spam/social-engineering and may require intervention.