Top 10 sender domains - Admin email submissions (FP)
This query visualises emails submitted by admins as false positives, summarizing the data by top 10 sender domains of those emails
Microsoft Sentinel (KQL)

This query visualises emails submitted by admins as false positives, summarizing the data by top 10 sender domains of those emails

Already have an account?