All Detections

Hunt for TABL changes

Azure Sentinel@AzureSentinel
updated Jun 17, 2025017

This query helps hunting for Tenant allow/block list (TABL) changes in Defender for Office 365

Microsoft Sentinel (KQL)