Microsoft Sentinel low experimental kql

Mimecast Secure Email Gateway - Spam Event Thread

Detects threat from spam event thread protection logs

View Source

Detection Logic

MimecastSIEM_CL
| where mimecastEventId_s=="mail_spameventthread"

Field Validations

Loading…

Comments (0)

Loading comments...