All Detections

Detecting Inbox Rule Creation Activity

avatar
Bi Yue Xu@biyuexu
updated Sep 12, 2026205

This query returns a summary of inbox rule creation events from Microsoft Purview Audit logs over the past 15 days.

Microsoft Sentinel (KQL)