Microsoft Sentinel informational experimental kql

Guardian- URL Reachability Policy Violation Detection

'This alert creates an incident when URL Reachability Policy Violation detected from the Guardian.'

View Source

Detection Logic

Guardian
| where PolicyViolatedControlFeature =~ 'URL Reachability'
| where Severity =~ 'Informational'

Field Validations

Loading…

Comments (0)

Loading comments...