Skip to content

Latest commit

 

History

History
15 lines (11 loc) · 428 Bytes

internal_phishing.md

File metadata and controls

15 lines (11 loc) · 428 Bytes
Raw

Internal Phishing Kusto Queries

EmailEvents | where EmailDirection =~ "Intra-org" and isnotempty(ThreatTypes) | summarize count() by ThreatTypes

EmailEvents | where EmailDirection =~ "Intra-org" and ThreatTypes =~ "malware"

EmailEvents | where EmailDirection =~ "Intra-org" and ThreatTypes =~ "phish"

EmailEvents | where EmailDirection =~ "Intra-org" and isnotempty(ThreatTypes) | summarize count() by ThreatTypes