Office 365 Activity Outside USA

Office 365 - Activity Outside USA

Configuration

query

exists:source_country_code NOT source_country_code:US NOT source_country_code:CA NOT event_class_id:EVENT_CATEGORY_MALWARE_DETECTED_IN_EMAIL

config

Key | Value — | — type | aggregation-v1 query | exists:source_country_code NOT source_country_code:US NOT source_country_code:CA NOT event_class_id:EVENT_CATEGORY_MALWARE_DETECTED_IN_EMAIL streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000

SIEM Office 365 Alerts

SIEM Office 365 Alerts.


Last modified December 31, 1969