Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Detections by detection methods

Azure Sentinel@AzureSentinel

•updated Jun 17, 2025•2•0•21

This query helps reviewing malicious email detections by detection methods

Microsoft Sentinel (KQL)

Tags

T1566 - Phishing TA0001 - Initial Access T1204.001 - Malicious Link T1204.002 - Malicious File T1656 - Impersonation T1672 - Email Spoofing TA0002 - Execution TA0005 - Defense Evasion T1608.005 - Link Target T1598.003 - Spearphishing Link T1221 - Template Injection DS0022 - File T1070.004 - File Deletion M1049 - Antivirus/Antimalware T1593.002 - Search Engines DS0021 - Persona T1206 - Sudo Caching T1673 - Virtual Machine Discovery T1548.003 - Sudo and Sudo Caching T1588.007 - Artificial Intelligence TA0042 - Resource Development TA0043 - Reconnaissance TA0004 - Privilege Escalation TA0007 - Discovery Email Phishing Detected Email Malware Detected Office 365 Microsoft Exchange Server M365 Unified Audit Logkqltactic:InitialAccesstechnique:T1566

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?