Detection rules › By catalog entry

M365-SecurityComplianceAlerts

Catalog entry	Rules
any	1
AlertEntityGenerated	4
AlertTriggered	1

any

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

M365 Purview Security Compliance Signal severity low building block

AlertEntityGenerated

4 detection rules reference this catalog entry. View catalog entry.

Splunk (4)

O365 Email Reported By User Found Malicious severity medium T1566,T1566.001,T1566.002
O365 Email Suspicious Behavior Alert severity medium T1114,T1114.003
O365 Safe Links Detection severity medium T1566,T1566.001
O365 ZAP Activity Detection severity low T1566,T1566.001,T1566.002

AlertTriggered

1 detection rules reference this catalog entry. View catalog entry.

Splunk (1)

O365 Security And Compliance Alert Triggered severity medium T1078,T1078.004

Back to all M365-SecurityComplianceAlerts catalog entries