Admin Submissions by Submission State (FN)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query visualises the total amount of admin false negative submissions by the state of the submission.

Attribute Value
Type Hunting Query
Solution GitHub Only
ID eb1a6d00-aa08-4e27-9eb4-47f4ac37ccb4
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Email%20and%20Collaboration%20Queries/Submissions/Admin%20Submissions%20by%20Submission%20State%20-%20FN.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries