Microsoft Sentinel high experimental kql

Mimecast Secure Email Gateway - Internal Email Protect

'Detects threats from internal email threat protection.'

View Source

Detection Logic

MimecastCG
| where Type == "email_iep"
| extend  SenderEnvelope = ['Sender Envelope']  , MessageId = ['Message ID']

Field Validations

Loading…

Comments (0)

Loading comments...