Detection rules › By event

Defender-EmailEvents

Event	Rules
any	12

any

12 detection rules reference this event. View event page.

Kusto (12)

Dataverse - Terminated employee exfiltration over email severity high T1567, T1639
Detect Direct Send phishing emails T1566
Possible Phishing with CSL and Network Sessions severity medium T1102, T1566
Star Blizzard C2 Domains August 2022 severity high T1566
TI Map Domain entity to EmailEvents severity medium T1566
TI map Domain entity to EmailEvents severity medium T1566
TI Map Domain entity to EmailUrlInfo severity medium T1566
TI map Domain entity to EmailUrlInfo severity medium T1566
TI Map Email entity to EmailEvents severity medium T1566
TI map Email entity to EmailEvents severity medium T1566
TI Map URL Entity to EmailUrlInfo severity medium T1071
TI Map URL Entity to EmailUrlInfo severity medium T1071