Detection rules › By catalog entry

M365-MicrosoftFlow

Catalog entry	Rules
any	1
CreateFlow	1
DeleteFlow	1

any

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

Power Automate - Departing employee flow activity severity high T0813,T0826,T0879,T1485,T1491,T1567

CreateFlow

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

Power Automate - Departing employee flow activity severity high T0813,T0826,T0879,T1485,T1491,T1567

DeleteFlow

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

Power Automate - Unusual bulk deletion of flow resources severity medium T0828,T1485,T1685

Back to all M365-MicrosoftFlow catalog entries