PST Export Alert Using eDiscovery Alert

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Alert on when a user has performed an eDiscovery search or exported a PST file from the search. This PST file usually has sensitive information including email body content