Detection rules › By event

M365-SecurityComplianceAlerts

Event	Rules
any	1
AlertEntityGenerated	4
AlertTriggered	2

any

1 detection rules reference this event. View event page.

Elastic (1)

M365 Purview Security Compliance Signal severity low building block

AlertEntityGenerated

4 detection rules reference this event. View event page.

Splunk (4)

O365 Email Reported By User Found Malicious severity medium T1566, T1566.001, T1566.002
O365 Email Suspicious Behavior Alert severity medium T1114, T1114.003
O365 Safe Links Detection severity medium T1566, T1566.001
O365 ZAP Activity Detection severity low T1566, T1566.001, T1566.002

AlertTriggered

2 detection rules reference this event. View event page.

Elastic (1)

Deprecated - M365 Security Compliance Email Reported by User as Malware or Phish severity medium T1566, T1566.001, T1566.002

Splunk (1)

O365 Security And Compliance Alert Triggered severity medium T1078, T1078.004