Office 365 Group Creation Failure
Detects when an attempt to create a group in Office 365 fails. This could indicate an adversary attempting to create a new group for various purposes (e.g., data exfiltration, privilege escalation) but being blocked due to insufficient permissions, policy restrictions, or other errors. Repeated failures from a single user might suggest a targeted attempt.
YARA-L
