File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
Solutions/Microsoft 365/Analytic Rules Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -5,7 +5,7 @@ description: |
55 The query leverages KQL built-in anomaly detection algorithms to find large deviations from baseline patterns.
66 Sudden increases in execution frequency of sensitive actions should be further investigated for malicious activity.
77 Manually change scorethreshold from 1.5 to 3 or higher to reduce the noise based on outliers flagged from the query criteria.
8- Read more about MailItemsAccessed- https://docs .microsoft.com/microsoft-365/compliance/advanced- audit?view=o365-worldwide#mailitemsaccessed '
8+ Read more about MailItemsAccessed- https://learn .microsoft.com/en-us/purview/ audit-log-investigate-accounts '
99severity : Medium
1010status : Available
1111requiredDataConnectors :
@@ -76,5 +76,5 @@ entityMappings:
7676 fieldMappings :
7777 - identifier : Address
7878 columnName : SourceIPMax
79- version : 2.0.5
80- kind : Scheduled
79+ version : 2.0.6
80+ kind : Scheduled
You can’t perform that action at this time.
0 commit comments