Luis Meneses
@luismenesesCompletionist
1 follower6 downloads37 copies4 likes355 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
1
1
1
Platforms
2
1
Products / Services
2
1
MITRE Techniques
1
1
1
1
1
This detection identifies repeated outbound email events where large files are sent multiple times within a specific time window. It helps uncover potential data exfiltration attempts or misuse of corporate email for transferring large files externally.
Thresholds for file size, frequency, and time window can be adjusted to fit organizational context.
Thresholds for file size, frequency, and time window can be adjusted to fit organizational context.
This detection identifies when a one-on-one Microsoft Teams chat is initiated with an external domain that has not been observed in previous Teams chats (past 90 days) or recent email communications (past 15 days). This may indicate a new, potentially unsolicited or suspicious contact attempting to engage with an internal user, which could represent a social engineering attempt or early-stage reconnaissance.