Microsoft Sentinel high experimental kql

Mimecast Secure Email Gateway - Attachment Protect

Detect threat for mail attachment under the targeted threat protection

View Source

Detection Logic

MimecastSIEM_CL
| where mimecastEventId_s=="mail_ttp_attachment"

Field Validations

Loading…

Comments (0)

Loading comments...