Home / Stories / Topic

OfficeActivity

Topic • 2 Stories

Related: KQL Cloud Security Azure DevSecOps Entra ID Microsoft Sentinel AI Security Threat Hunting

Dikshant Lather · Sep 25, 2026

Detecting Suspicious Microsoft 365 Inbox Forwarding Rules Using OfficeActivity

Halt Business Email Compromise (BEC) fraud by catching covert Exchange Online inbox rules forwarding emails to external domains.

Cloud Security 2 min read

0 0

Detecting Suspicious Microsoft 365 Inbox Forwarding Rules Using OfficeActivity

Dikshant Lather · Sep 25, 2026

Detecting Mass Exfiltration and File Downloads in SharePoint & OneDrive

Identify anomalous mass file download operations and data hoarding across SharePoint Online and OneDrive for Business using statistical KQL baseline thresholds.

Cloud Security 2 min read

0 0

Detecting Mass Exfiltration and File Downloads in SharePoint & OneDrive