Suspicious Teams Application Related ObjectAcess Event
Detects an access to authentication tokens and accounts of Microsoft Teams desktop application.
Sigma

Detects an access to authentication tokens and accounts of Microsoft Teams desktop application.

Already have an account?