Detection rules › By event

Intune-Application

Event	Rules
Create ManagedDeviceMobileAppConfiguration	1
Create MobileApp	2
Create MobileAppCategory	1
Delete ManagedDeviceMobileAppConfiguration	1
Delete MobileApp	1
Delete MobileAppCategory	1

Create ManagedDeviceMobileAppConfiguration

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202

Create MobileApp

2 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202

Panther (1)

Intune Create or Modify Client App severity medium T1021.007, T1072, T1202

Create MobileAppCategory

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202

Delete ManagedDeviceMobileAppConfiguration

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202

Delete MobileApp

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202

Delete MobileAppCategory

1 detection rules reference this event. View event page.

Splunk (1)

Microsoft Intune Mobile Apps T1021, T1021.007, T1072, T1105, T1202