• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Top Domains Outbound with Emails with Threats Inbound (Partner BEC)

    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Azure Sentinel@AzureSentinel
    •updated Jun 27, 2025•1•0•58

    This query visualises top outbound recipient domains by outbound email volume and shows total number of inbound emails with Threats from the same domains (as inbound senders)

    Microsoft Sentinel (KQL)

    Tags

    T1566 - PhishingTA0001 - Initial AccessT1586.002 - Email AccountsT1591.002 - Business RelationshipsM1056 - Pre-compromiseT1114 - Email CollectionT1667 - Email BombingT1672 - Email SpoofingTA0042 - Resource DevelopmentTA0043 - ReconnaissanceTA0009 - CollectionTA0040 - ImpactTA0005 - Defense EvasionEmail SentEmail ReceivedEmail Phishing DetectedOffice 365M365 Unified Audit Logkqltactic:InitialAccesstechnique:T1566

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?