Detection rules › By catalog entry

M365-SharePointSharingOperation

Catalog entry	Rules
AnonymousLinkCreated	2
AnonymousLinkUpdated	1
AnonymousLinkUsed	1
SiteCollectionAdminAdded	1

AnonymousLinkCreated

2 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

O365 OneDrive Anonymous Link Created or Updated severity medium

Panther (1)

Microsoft365 External Document Sharing severity low T1039

AnonymousLinkUpdated

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

O365 OneDrive Anonymous Link Created or Updated severity medium

AnonymousLinkUsed

1 detection rules reference this catalog entry. View catalog entry.

YARA-L (1)

O365 OneDrive Anonymous Link Accessed severity medium T1048,T1048.002

SiteCollectionAdminAdded

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

M365 SharePoint Site Administrator Added severity medium T1098,T1098.003

Back to all M365-SharePointSharingOperation catalog entries