Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

'This content is employed to correlate with Microsoft Defender XDR phishing-related alerts. It focuses on instances where a user successfully connects to a phishing URL from a non-Microsoft network device and subsequently makes successful sign-in attempts from the phishing IP address.'
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
5095