Microsoft Sentinel informational experimental kql

Mimecast Secure Email Gateway - AV

Detects threats from email anti virus scan

View Source

Detection Logic

MimecastSIEM_CL
| where mimecastEventId_s=="mail_av"

Field Validations

Loading…

Comments (0)

Loading comments...