Detection rules › By catalog entry

Defender-AlertEvidence

Catalog entry	Rules
any	3

any

3 detection rules reference this catalog entry. View catalog entry.

Kusto (3)

Defender Alert Evidence severity high T1546
Possible Phishing with CSL and Network Sessions severity medium T1102,T1566
Potential Ransomware activity related to Cobalt Strike severity high T1059,T1070,T1078,T1490

Back to all Defender-AlertEvidence catalog entries