Microsoft Sentinel low experimental kql

Cyble Vision Alerts OSINT Mention Detected

'Triggers when Cyble detects an OSINT mention related to monitored keywords, entities, or brand identifiers. OSINT findings may indicate data leaks, expose content, targeting activity, impersonation, or discussions that may require investigation.'

View Source

Detection Logic

Alerts_osint
| where Service == "osint"
| extend MappedSeverity = Severity

Field Validations

Loading…

Comments (0)

Loading comments...