Detection catalogue

Explore published rules with transparent provenance, licensing, and ATT&CK mappings.

detections

Loading detections…

File Malware by Top Malware Families (Safe Attachments)

This query visualises total Malware detections of files located on SharePoint, OneDrive and Teams over time summarizing the data by the various Malware families detected focusing on Defender for Office 365 detections (detonations)

ATT&CK coverage

Outside the enterprise matrix

T1566Phishing 507 detections cover this technique

Detection requirements

Log source product: microsoftthreatprotection
Log source service: cloudappevents

What the source says

Tagged by the source as

InitialAccess

Detection catalogue

File Malware by Top Malware Families (Safe Attachments)

ATT&CK coverage

Detection requirements

What the source says

Tagged by the source as

Detection logic

File Malware by Top Malware Families (Safe Attachments)

ATT&CK coverage

Detection requirements

What the source says

Tagged by the source as

Detection logic