KQL - Suspicious External SharePoint (*-my.sharepoint.com) Sharing Campaign

Udi B@Udi

•updated Aug 20, 2026•5•0•13

Inbound email campaigns containing links to external personal SharePoint sites (*-my.sharepoint.com) sent to multiple recipients.