Detection rules › By catalog entry

M365-HygieneEvent

Catalog entry	Rules
any	1
User restricted from sending email	2

any

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

M365 Quarantine and Hygiene Signal severity low building block T1566,T1566.001,T1566.002

User restricted from sending email

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Microsoft 365 - User Restricted from Sending Email severity medium T1199

Elastic (1)

Deprecated - M365 Security Compliance User Restricted from Sending Email severity medium

Back to all M365-HygieneEvent catalog entries