Dataverse - Mass export of records to Excel

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies users exporting a large amount of records from Dynamics 365 to Excel, significantly more records exported than any other recent activity by that user. Large exports from users with no recent activity are identified using a predefined threshold.

Attribute Value
Type Analytic Rule
Solution Microsoft Business Applications
ID 57000f0d-ff5d-4166-94b6-aa5fb62b16ec
Severity Low
Status Available
Kind Scheduled
Tactics Exfiltration
Techniques T1567
Required Connectors Dataverse
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
DataverseActivity ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Microsoft Business Applications