Detection rules › By event

M365-ThreatIntelligence

Event	Rules
any	1
TIMailData	2

any

1 detection rules reference this event. View event page.

Elastic (1)

M365 Threat Intelligence Signal severity low building block T1204, T1204.001, T1204.002, T1566, T1566.001, T1566.002

TIMailData

2 detection rules reference this event. View event page.

Sigma (1)

Suspicious Email Delivered In Microsoft 365 severity medium T1566, T1566.001, T1566.002

Splunk (1)

O365 Threat Intelligence Suspicious Email Delivered severity low T1566, T1566.001, T1566.002