FilesExpand file tree

main

/

o365

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

main

/

o365

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
collection_exchange_excessive_mail_items_accessed.toml		collection_exchange_excessive_mail_items_accessed.toml
collection_exchange_mailbox_access_by_unusual_client_app_id.toml		collection_exchange_mailbox_access_by_unusual_client_app_id.toml
collection_exchange_new_inbox_rule.toml		collection_exchange_new_inbox_rule.toml
collection_onedrive_excessive_file_downloads.toml		collection_onedrive_excessive_file_downloads.toml
credential_access_entra_id_device_reg_via_oauth_redirection.toml		credential_access_entra_id_device_reg_via_oauth_redirection.toml
credential_access_entra_id_potential_user_account_brute_force.toml		credential_access_entra_id_potential_user_account_brute_force.toml
credential_access_entra_id_user_excessive_sso_logon_errors.toml		credential_access_entra_id_user_excessive_sso_logon_errors.toml
credential_access_identity_user_account_lockouts.toml		credential_access_identity_user_account_lockouts.toml
defense_evasion_entra_id_susp_oauth2_authorization.toml		defense_evasion_entra_id_susp_oauth2_authorization.toml
defense_evasion_exchange_anti_phish_policy_deletion.toml		defense_evasion_exchange_anti_phish_policy_deletion.toml
defense_evasion_exchange_anti_phish_rule_modification.toml		defense_evasion_exchange_anti_phish_rule_modification.toml
defense_evasion_exchange_dkim_signing_config_disabled.toml		defense_evasion_exchange_dkim_signing_config_disabled.toml
defense_evasion_exchange_dlp_policy_removed.toml		defense_evasion_exchange_dlp_policy_removed.toml
defense_evasion_exchange_exchange_safelinks_disabled.toml		defense_evasion_exchange_exchange_safelinks_disabled.toml
defense_evasion_exchange_mailbox_audit_bypass_association.toml		defense_evasion_exchange_mailbox_audit_bypass_association.toml
defense_evasion_exchange_malware_filter_policy_deletion.toml		defense_evasion_exchange_malware_filter_policy_deletion.toml
defense_evasion_exchange_malware_filter_rule_mod.toml		defense_evasion_exchange_malware_filter_rule_mod.toml
defense_evasion_exchange_new_inbox_rule_delete_or_move.toml		defense_evasion_exchange_new_inbox_rule_delete_or_move.toml
defense_evasion_exchange_safe_attach_rule_disabled.toml		defense_evasion_exchange_safe_attach_rule_disabled.toml
defense_evasion_teams_custom_app_interaction_allowed.toml		defense_evasion_teams_custom_app_interaction_allowed.toml
defense_evasion_teams_external_access_enabled.toml		defense_evasion_teams_external_access_enabled.toml
exfiltration_exchange_transport_rule_creation.toml		exfiltration_exchange_transport_rule_creation.toml
exfiltration_exchange_transport_rule_modification.toml		exfiltration_exchange_transport_rule_modification.toml
impact_security_compliance_potential_ransomware_activity.toml		impact_security_compliance_potential_ransomware_activity.toml
impact_security_compliance_unusual_volume_of_file_deletion.toml		impact_security_compliance_unusual_volume_of_file_deletion.toml
initial_access_defender_for_m365_threat_intelligence_signal.toml		initial_access_defender_for_m365_threat_intelligence_signal.toml
initial_access_entra_id_portal_login_atypical_travel.toml		initial_access_entra_id_portal_login_atypical_travel.toml
initial_access_entra_id_portal_login_impossible_travel.toml		initial_access_entra_id_portal_login_impossible_travel.toml
initial_access_identity_illicit_consent_grant_via_registered_application.toml		initial_access_identity_illicit_consent_grant_via_registered_application.toml
initial_access_identity_oauth_phishing_via_first_party_microsoft_application.toml		initial_access_identity_oauth_phishing_via_first_party_microsoft_application.toml
initial_access_security_compliance_user_reported_phish_malware.toml		initial_access_security_compliance_user_reported_phish_malware.toml
initial_access_security_compliance_user_restricted_from_sending_email.toml		initial_access_security_compliance_user_restricted_from_sending_email.toml
lateral_movement_onedrive_malware_uploaded.toml		lateral_movement_onedrive_malware_uploaded.toml
lateral_movement_sharepoint_malware_uploaded.toml		lateral_movement_sharepoint_malware_uploaded.toml
persistence_entra_id_global_administrator_role_assign.toml		persistence_entra_id_global_administrator_role_assign.toml
persistence_exchange_management_role_assignment.toml		persistence_exchange_management_role_assignment.toml
persistence_exchange_suspicious_mailbox_permission_delegation.toml		persistence_exchange_suspicious_mailbox_permission_delegation.toml
persistence_teams_guest_access_enabled.toml		persistence_teams_guest_access_enabled.toml
privilege_escalation_exchange_new_or_modified_federation_domain.toml		privilege_escalation_exchange_new_or_modified_federation_domain.toml
View all files