Data Source: Check Point Harmony Email & Collaboration | Detection.FYI

Elastic Defend and Email Alerts Correlation

Apr 10, 2026 · Use Case: Threat Detection Rule Type: Higher-Order Rule Resources: Investigation Guide Data Source: Elastic Defend Data Source: Check Point Harmony Email & Collaboration Domain: Email Domain: Endpoint ·
Share on:

This rule correlates any Elastic Defend alert with an email security related alert by target user name. This may indicate the successful execution of a phishing attack.

Read More