eDiscovery or Compliance Search Created
Detects creation and execution of compliance searches or eDiscovery cases in Exchange/SaaS environments. Attackers with administrative access may use compliance searches to harvest sensitive data such as credentials, financial records, or PII across the organization.
Cortex XDR
