Labs References Blog

Detection rules › By event

Defender-MessageEvents

Event	Rules
any	3

any

3 detection rules reference this event. View event page.

Kusto (3)

Detect external user sending suspicious link to multiple users T1566, T1566.002
Detect Malicious Teams Message T1204, T1204.001, T1566, T1566.002
Detect Possible Teams BEC Attack by High Teams Recipients T1566