Microsoft Sentinel low experimental kql

Mimecast Secure Email Gateway - Spam Event Thread

'Detects threat from spam event thread protection logs.'

View Source

Detection Logic

MimecastCG
| where Type == "email_spam"
| extend  SenderEnvelope = ['Sender Envelope']

Field Validations

Loading…

Comments (0)

Loading comments...