Detection rules › By event

M365-HygieneEvent

Event	Rules
any	1
User restricted from sending email	2

any

1 detection rules reference this event. View event page.

Elastic (1)

M365 Quarantine and Hygiene Signal severity low building block T1566, T1566.001, T1566.002

User restricted from sending email

2 detection rules reference this event. View event page.

Sigma (1)

Microsoft 365 - User Restricted from Sending Email severity medium T1199

Elastic (1)

Deprecated - M365 Security Compliance User Restricted from Sending Email severity medium