Detection rules › By eventM365-SharePointSearchEventRulesSearchQueryInitiatedSharePoint1SearchQueryInitiatedSharePoint#1 detection rules reference this event. View event page.Splunk (1)O365 SharePoint Suspicious Search Behavior severity low T1213, T1213.002, T1552