Detection rules › By event

M365-MicrosoftFlow

Event	Rules
any	1
CreateFlow	1
DeleteFlow	1

any

1 detection rules reference this event. View event page.

Kusto (1)

Power Automate - Departing employee flow activity severity high T0813, T0826, T0879, T1485, T1491, T1567

CreateFlow

1 detection rules reference this event. View event page.

Kusto (1)

Power Automate - Departing employee flow activity severity high T0813, T0826, T0879, T1485, T1491, T1567

DeleteFlow

1 detection rules reference this event. View event page.

Kusto (1)

Power Automate - Unusual bulk deletion of flow resources severity medium T0828, T1485, T1685