High Volume OneDrive File Downloads

Ankit Mehta@Secvyn

•updated Jun 13, 2026•0•0•3

This rule detects when a single user downloads 50 or more files from OneDrive within a one-hour period. This could indicate data exfiltration or unauthorized bulk access to sensitive information.