High Volume Office File Copy/Move

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects when a single account initiates a high volume of Office file (Word, Excel, PowerPoint) copy or move operations within a one-hour window. This could indicate data exfiltration or staging activities.