Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

This query visualises total emails with Phish-Spoof-internal domain detections summarizing the data by the top 10 email sender P2 domain (SenderFromDomain) and sender P1 domain (SenderMailFromDomain).
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
2058
This query looks for Teams messages from an external user with a suspicious display name.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
8056