Detection rules › By event

M365-ThreatIntelligenceAtpContent

Event	Rules
any	1
AtpDetection	1

any

1 detection rules reference this event. View event page.

Elastic (1)

M365 Threat Intelligence Signal severity low building block T1204, T1204.001, T1204.002, T1566, T1566.001, T1566.002

AtpDetection

1 detection rules reference this event. View event page.

Splunk (1)

O365 Threat Intelligence Suspicious File Detected severity medium T1204, T1204.002