Email Top Domains sending Malware

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query visualises total inbound emails with Malware detections summarizing the data by the top email sender P2 domain (SenderFromDomain)

Attribute Value
Type Hunting Query
Solution GitHub Only
ID c7274e0c-af01-43a3-ad63-6a679191cc7f
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Email%20and%20Collaboration%20Queries/Malware/Top%20Domains%20sending%20Malware.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries