Detection rules › By catalog entry

Defender-EmailEvents

Catalog entry	Rules
any	12

any

12 detection rules reference this catalog entry. View catalog entry.

Kusto (12)

Dataverse - Terminated employee exfiltration over email severity high T1567,T1639
Detect Direct Send phishing emails T1566
Possible Phishing with CSL and Network Sessions severity medium T1102,T1566
Star Blizzard C2 Domains August 2022 severity high T1566
TI Map Domain entity to EmailEvents severity medium T1566
TI map Domain entity to EmailEvents severity medium T1566
TI Map Domain entity to EmailUrlInfo severity medium T1566
TI map Domain entity to EmailUrlInfo severity medium T1566
TI Map Email entity to EmailEvents severity medium T1566
TI map Email entity to EmailEvents severity medium T1566
TI Map URL Entity to EmailUrlInfo severity medium T1071
TI Map URL Entity to EmailUrlInfo severity medium T1071

Back to all Defender-EmailEvents catalog entries