Latest Known Phishing Domain Indicator Match
This rule monitors for interactions with a list of known malicious phishing domains across email ingestion, user click events, and device network activity. It identifies potential exposure to phishing campaigns by tracking domain matches in incoming email URLs, user-clicked links, and outbound device network connections.
Microsoft Sentinel (KQL)
