Top Users receiving Phish
This query visualises total inbound emails with Phish detections summarizing the data by the top recipient email address (RecipientEmailAddress)
Microsoft Sentinel (KQL)

This query visualises total inbound emails with Phish detections summarizing the data by the top recipient email address (RecipientEmailAddress)

Already have an account?