T1566.003 Teams External Spearphishing with URL or Attachment Lure

KQL Query from file: T1566.003 Teams External Spearphishing with URL or Attachment Lure

Microsoft Sentinel (KQL)