Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
2
Contributors
1
1
Categories
2
2
1
Platforms
2
1
1
Products / Services
2
1
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
KQL Query from file: Monitor Copilot Agent for SharePoint
Use this query to review OAuth applications whose behaviour has changed as compared to a prior baseline period. The following query returns OAuth Applications accessing user mail via Graph that did not do so in the preceding week.
