Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleMailbox Audit Bypass

The mailbox audit is responsible for logging specified mailbox events. Attackers may attempt to bypass this mechanism to conceal actions taken.

Source table → cloud.office365.management.exchange

Expand
titleSecOpsO365PSTExportAlert

This detection is triggered when a user has performed an Ediscovery or exported a pst file with sensitive information.

Source table → cloud.office365.management