Office 365 Impossible Travel

Sections on this page

Configuration

Query

desc:Impossible travel activity

Config

Key | Value — | — type | aggregation-v1 query | desc:Impossible travel activity streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000

SIEM Office 365 Alerts

SIEM Office 365 Alerts


Last modified October 13, 2020