SigmaHQ/rules/cloud/m365
2021-08-24 14:15:50 +00:00
..
microsoft365_activity_by_terminated_user.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_activity_from_anonymous_ip_addresses.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_activity_from_infrequent_country.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_data_exfiltration_to_unsanctioned_app.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_from_suspicious_ip_addresses.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_impossible_travel_activity.yml Update 2021-08-20 02:10:32 +00:00
microsoft365_logon_from_risky_ip_address.yml Spelling fix 2021-08-24 14:15:50 +00:00
microsoft365_potential_ransomware_activity.yml Update microsoft365_potential_ransomware_activity.yml 2021-08-20 08:17:09 -05:00
microsoft365_suspicious_inbox_forwarding.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_suspicious_oauth_app_file_download_activities.yml Update 2021-08-23 23:00:58 +00:00
microsoft365_unusual_volume_of_file_deletion.yml Update microsoft365_unusual_volume_of_file_deletion.yml 2021-08-20 08:17:25 -05:00
microsoft365_user_restricted_from_sending_email.yml Update microsoft365_user_restricted_from_sending_email.yml 2021-08-20 08:16:48 -05:00