Microsoft Sentinel high experimental kql

Mimecast Secure Email Gateway - URL Protect

'Detect threat when potentially malicious url found.'

View Source

Detection Logic

MimecastCG
| where Type == "email_ttp_url"
| extend  SenderEnvelope = ['Sender Envelope']

Field Validations

Loading…

Comments (0)

Loading comments...