Azure Sentinel
@AzureSentinel50 followers944 downloads1,418 copies43 likes37,654 views
1,223 detections
Filters
Last updated
All Time
Detection languages
1,223
Categories
220
218
180
171
135
Platforms
766
284
188
78
29
Products / Services
492
297
159
152
93
MITRE Techniques
530
485
467
348
348
Use this query to locate commands related to discovering highly privileged users in an environment, sometimes a precursor to ransomware
Use this query to locate emails with subject indicators of a reply or forward, and the attachment is a .doc, or a .zip containing a .doc. Review results for suspicious emails.
IcedId can lead to ransomware
IcedId can lead to ransomware
This query visualises the original detection technology of emails submitted as spam false positive by admins
This query visualises the top admins performing false negative submissions
This query helps in checking the sender-recipient contact establishment status
In this detection approach, we correlate email from non-prevalent senders in the organization with impersonation intents
This query visualises total inbound emails with Malware detections summarizing the data by the top email sender P2 domain (SenderFromDomain)
This query visualises total inbound emails with Malware detections summarizing the data by the top recipient email address (RecipientEmailAddress)
This query visualises total emails with Phish detections over time summarizing the data daily by Delivery Location.
This query visualises total emails with Phish detections summarizing the data by various Phish detection technologies/controls
Page 72 of 123