File Creation
This detection is a simple query for file creation based on the filename and the device where the file was created.
Microsoft Sentinel (KQL)

This detection is a simple query for file creation based on the filename and the device where the file was created.

Already have an account?