New TABL Items
This query helps identifying when new items being added to the Tenant/Allow Block List (TABL) in Defender for Office 365.
Microsoft Sentinel (KQL)

This query helps identifying when new items being added to the Tenant/Allow Block List (TABL) in Defender for Office 365.

Already have an account?