All Detections

Detecting emails with attachments sent to free public domains

avatar
Bi Yue Xu@biyuexu
updated Sep 12, 2026209

This query uses Purview IRM telemetry to identify emails with attachments sent to free public domains.

Microsoft Sentinel (KQL)