Sagan medium stable other

[MSAPI-SECURITYCOMPLIANCECENTER] User Restricted From Sending Email

[MSAPI-SECURITYCOMPLIANCECENTER] User Restricted From Sending Email

View Source

Detection Logic

alert any any any -> any any (msg:"[MSAPI-SECURITYCOMPLIANCECENTER] User Restricted From Sending Email"; program:SecurityComplianceCenter; json_content: ".Operation", "AlertTriggered"; json_content:".Name","User restricted from sending email"; json_content:".Status","Active"; json_map: "program",".Workload"; classtype:suspicious-activity; priority:1; sid:5017926; rev:1; metadata: createdOn 2026_05_20, updatedOn 2026_05_20;)

Field Validations

Loading…

Comments (0)

Loading comments...