Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects bulk file copy to staging directories, mass file read access, mailbox-export-rule creation, and bulk PST/mailbox access, excluding DLP/eDiscovery/legal-hold exports tagged with a case ID and scheduled data-migration windows.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
1010