Detection rules › By catalog entryM365-SharePointSearchCatalog entryRulesSearchQueryInitiatedSharePoint1SearchQueryInitiatedSharePoint#1 detection rules reference this catalog entry. View catalog entry.Splunk (1)O365 SharePoint Suspicious Search Behavior severity low T1213,T1213.002,T1552 Back to all M365-SharePointSearch catalog entries