• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Malware detections by Workload Locations

    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Azure Sentinel@AzureSentinel
    •updated Jun 25, 2025•3•0•30

    This query visualises the amount of total Malware detections of files located on SharePoint, OneDrive and Teams, summarizing by the locations they are stored

    Microsoft Sentinel (KQL)

    Tags

    T1566 - PhishingTA0001 - Initial AccessT1074.001 - Local Data StagingT1074 - Data StagedT1587.001 - MalwareT1608.001 - Upload MalwareT1588.001 - MalwareTA0009 - CollectionTA0042 - Resource DevelopmentMalware DetectedFile EventFile DownloadFile UploadOffice 365AzureM365 Unified Audit LogAzure Sentinelkqltactic:InitialAccesstechnique:T1566

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?