Microsoft Sentinel informational experimental kql

Mimecast Secure Email Gateway - AV

'Detects threats from email anti virus scan.'

View Source

Detection Logic

MimecastCG
| where Type == "email_antivirus"
| extend  SenderEnvelope = ['Sender Envelope']

Field Validations

Loading…

Comments (0)

Loading comments...