Bulk File Exfiltration to OneDrive or SharePoint via OfficeActivity

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•2

Detects a high volume of file uploads (greater than 50) to OneDrive or SharePoint by a single user within a 5-minute window, potentially indicating bulk exfiltration of data.