Attachment Interaction Detection

Igor Oliveira@Pr0fiLeRR

•updated Feb 22, 2026•2•0•49

This KQL script detects if end user interacted with an attachment in a potential phishing/BEC incident.