Sensitive OneDrive Keyword Discovery Followed by File Access
Detects cloud searches for credential, key, production, database, or confidential terms followed by access to matching files within OneDrive.
Microsoft Sentinel (KQL)

Detects cloud searches for credential, key, production, database, or confidential terms followed by access to matching files within OneDrive.

Already have an account?