Quarantine Phish Reason trend

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query visualises the amount of phish emails that are quarantined, summarized daily by the detection method

Attribute Value
Type Hunting Query
Solution GitHub Only
ID 6f7df1b7-5613-45e5-9b82-3ec95d86e0e8
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Email%20and%20Collaboration%20Queries/Quarantine/Quarantine%20Phish%20reason%20trend.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries