Detection of Email URL Interaction
This simple script detects whether a user clicked on a URL in an email message. It uses the 'UrlClickEvents' table in Sentinel to identify such interactions, as well as the 'EmailEvents' table to correlate the email message with the URL click event.
Sigma
