All Detections

Suspicious IT support or helpdesk impersonation via a Teams message

avatar
Thomas Carr@Tomcat
updated Jul 29, 202629149

This detection looks for adversaries impersonating IT support or helpdesk via a Teams message.

Microsoft Sentinel (KQL)