Data Source: Microsoft Defender | Detection.FYI

M365 Threat Intelligence Signal

Sep 1, 2025 · Domain: Cloud Domain: SaaS Data Source: Microsoft 365 Data Source: Microsoft 365 Audit Logs Data Source: Microsoft Defender Data Source: Microsoft Defender Threat Intelligence Use Case: Threat Detection Tactic: Initial Access Resources: Investigation Guide ·
Share on:

Identifies a Microsoft 365 audit log generated for Threat Intelligence signals by Microsoft Defender for Office 365. Signals generated may relate to services such as Exchange Online, SharePoint Online, OneDrive for Business and others.

Read More