High Volume SharePoint File Downloads

Ankit Mehta@Secvyn

•updated Jun 13, 2026•0•0•5

This rule detects when a single user downloads 100 or more files from SharePoint within a one-hour period. This activity could indicate data exfiltration or unauthorized bulk access to sensitive documents.