Detection rules › By catalog entry

M365-ThreatIntelligence

Catalog entry	Rules
any	1
TIMailData	2

any

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

M365 Threat Intelligence Signal severity low building block T1204,T1204.001,T1204.002,T1566,T1566.001,T1566.002

TIMailData

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Suspicious Email Delivered In Microsoft 365 severity medium T1566,T1566.001,T1566.002

Splunk (1)

O365 Threat Intelligence Suspicious Email Delivered severity low T1566,T1566.001,T1566.002

Back to all M365-ThreatIntelligence catalog entries