SharePoint Large File Download Spikes

Ankit Mehta@Secvyn

•updated Jun 30, 2026•2•0•5

This rule detects an unusual spike in large file downloads from SharePoint by a single user within a one-hour window. It specifically looks for users downloading 5 or more files, each larger than 100MB, from SharePoint.