Office 365 Activity Outside USA
Office 365 - Activity Outside USA
Configuration
query
exists:source_country_code NOT source_country_code:US NOT source_country_code:CA NOT event_class_id:EVENT_CATEGORY_MALWARE_DETECTED_IN_EMAIL
config
Key | Value — | — type | aggregation-v1 query | exists:source_country_code NOT source_country_code:US NOT source_country_code:CA NOT event_class_id:EVENT_CATEGORY_MALWARE_DETECTED_IN_EMAIL streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000
SIEM Office 365 Alerts
SIEM Office 365 Alerts.
Last modified
December 31, 1969