Every published rule under Microsoft Sentinel analytics, with the source it came from, the licence it carries and the ATT&CK techniques it covers.
Loading detections…
This analytics rule detects high-severity ransomware threats targeting the organization, as reported by CYFIRMA's Dark Web and Data Breach Intelligence feeds. The alert is generated when threat actors post, claim, or associate ransomware activity with corporate domains, brands, or subsidiaries, indicating a potential data breach, extortion attempt, or unauthorized access.
Published to signed-in readers
The query as its source wrote it, its canonical form, and the content hash that pins this exact revision.