Office 365 New Country Activity

Configuration

query

event_class_id:ALERT_ANUBIS_DETECTION_NEW_COUNTRY

config

Key | Value — | — type | aggregation-v1 query | event_class_id:ALERT_ANUBIS_DETECTION_NEW_COUNTRY streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000

SIEM Office 365 Alerts

SIEM Office 365 Alerts.

Anomalous Logins

Anomalous logins may signify suspicious activity.


Last modified August 2, 2021