Microsoft Sentinel high experimental kql

Guardian- Privacy Protection PII Policy Violation Detection

'This alert creates an incident when Privacy Protection PII Policy Violation detected from the Guardian'

View Source

Detection Logic

Guardian
| where PolicyViolatedControlFeature =~ 'PII Detection'
| where Severity =~ 'High'

Field Validations

Loading…

Comments (0)

Loading comments...