All Detections

Inbound Password-Protected Archive Bypassing Safe Attachments (T1566.001)

avatar
Bryant Smith@flowstate
updated Jun 24, 2026104

KQL Query from file: Inbound Password-Protected Archive Bypassing Safe Attachments (T1566.001)

Microsoft Sentinel (KQL)