Microsoft Sentinel high experimental kql

Mimecast Secure Email Gateway - Internal Email Protect

Detects threats from internal email threat protection

View Source

Detection Logic

MimecastSIEM_CL
| where mimecastEventId_s=="mail_ttp_iep"

Field Validations

Loading…

Comments (0)

Loading comments...