Top Users receiving Malware

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query visualises total inbound emails with Malware detections summarizing the data by the top recipient email address (RecipientEmailAddress)

Attribute Value
Type Hunting Query
Solution GitHub Only
ID 1c423f0d-57d6-41dc-869f-79899a2dae77
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Email%20and%20Collaboration%20Queries/Malware/Top%20Users%20receiving%20Malware.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries