DLP_Rule_Match_in_mail_message_content_Office 365_Exchange

Alert

DLP Rule match in mail message content

SK4 unified event:
Connector/Service

Office 365/Exchange

SK4 Version:

2.3.105

Created Date:

Tue Jan 22 2019 08:47:44 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue May 14 2019 07:12:18 GMT+0000 (Coordinated Universal Time)

Category

Security Alert

Description

A security alert has been detected by defined rules. Action has been taken to ensure DLP.

Search query

cef_vendor="skyformation" cef_name="security-threat-detected" destinationServiceName="Office 365" sourceServiceName="Exchange" fileType="message" act="send-mail"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources