Top Users receiving Phish

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query visualises total inbound emails with Phish detections summarizing the data by the top recipient email address (RecipientEmailAddress)

Attribute Value
Type Hunting Query
Solution GitHub Only
ID da24d001-6a74-4a48-89a7-c99ec1f45d32
Tactics InitialAccess
Techniques T1566
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Email%20and%20Collaboration%20Queries/Phish/Top%20Users%20receiving%20Phish.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries