Detection of Delivered Phishing-Themed Emails Containing URLs or Attachments
This KQL identifies inbound emails that were not blocked and have subject lines commonly associated with phishing or social engineering lures along with a URL and/or attachment
Microsoft Sentinel (KQL)
