Inbound Emails with QR Code URLs from Uncommon Senders
This query hunts for inbound emails that contain URLs embedded in QR codes and originate from senders that are not commonly observed in the environment, a common technique used in QR-based phishing campaigns.
Microsoft Sentinel (KQL)
