Rockstar 2FA / AiTM Campaign Email Detection

Detects emails matching the Microsoft-reported AiTM phishing campaign that used Code of Conduct review lures and PDF attachments.

Microsoft Sentinel (KQL)