Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleSecOpsO365PSTExportAlert

This detection is triggered when a user has performed an Ediscovery or exported a pst file with sensitive information.

Source table → cloud.office365.management

Expand
titleSecOpsO365SuspiciousAdminEmailForwarding

This detection is triggered when a user has configured several forwarding rules to the same email address.

Source table → cloud.office365.management