| splunk |
O365 Add App Role Assignment Grant User |
production |
2026-05-13 |
| splunk |
O365 Added Service Principal |
production |
2026-05-13 |
| splunk |
O365 Admin Consent Bypassed by Service Principal |
production |
2026-05-13 |
| splunk |
O365 Advanced Audit Disabled |
production |
2026-05-13 |
| splunk |
O365 Application Available To Other Tenants |
production |
2026-05-13 |
| splunk |
O365 Application Registration Owner Added |
production |
2026-05-13 |
| splunk |
O365 ApplicationImpersonation Role Assigned |
production |
2026-05-13 |
| splunk |
O365 Block User Consent For Risky Apps Disabled |
production |
2026-05-13 |
| splunk |
O365 Bypass MFA via Trusted IP |
production |
2026-05-13 |
| splunk |
O365 Compliance Content Search Exported |
production |
2026-05-13 |
| splunk |
O365 Compliance Content Search Started |
production |
2026-05-13 |
| splunk |
O365 Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
O365 Cross-Tenant Access Change |
production |
2026-05-13 |
| splunk |
O365 Disable MFA |
production |
2026-05-13 |
| splunk |
O365 DLP Rule Triggered |
production |
2026-05-13 |
| splunk |
O365 Elevated Mailbox Permission Assigned |
production |
2026-05-13 |
| splunk |
O365 Email Access By Security Administrator |
production |
2026-05-13 |
| splunk |
O365 Email Hard Delete Excessive Volume |
production |
2026-05-13 |
| splunk |
O365 Email New Inbox Rule Created |
production |
2026-05-13 |
| splunk |
O365 Email Reported By Admin Found Malicious |
production |
2026-05-13 |
| splunk |
O365 Email Reported By User Found Malicious |
production |
2026-05-13 |
| splunk |
O365 Email Security Feature Changed |
production |
2026-05-13 |
| splunk |
O365 Email Send and Hard Delete Suspicious Behavior |
production |
2026-05-13 |
| splunk |
O365 Email Suspicious Behavior Alert |
production |
2026-05-13 |
| splunk |
O365 Email Suspicious Search Behavior |
production |
2026-05-13 |
| splunk |
O365 Email Transport Rule Changed |
production |
2026-05-13 |
| splunk |
O365 Excessive Authentication Failures Alert |
production |
2026-05-13 |
| splunk |
O365 Excessive SSO logon errors |
production |
2026-05-13 |
| splunk |
O365 Exfiltration via File Access |
production |
2026-05-13 |
| splunk |
O365 Exfiltration via File Download |
production |
2026-05-13 |
| splunk |
O365 Exfiltration via File Sync Download |
production |
2026-05-13 |
| splunk |
O365 External Guest User Invited |
production |
2026-05-13 |
| splunk |
O365 External Identity Policy Changed |
production |
2026-05-13 |
| splunk |
O365 File Permissioned Application Consent Granted by User |
production |
2026-05-13 |
| splunk |
O365 SharePoint Allowed Domains Policy Changed |
production |
2026-05-13 |
| splunk |
O365 FullAccessAsApp Permission Assigned |
production |
2026-05-13 |
| splunk |
O365 High Number Of Failed Authentications for User |
production |
2026-05-13 |
| splunk |
O365 High Privilege Role Granted |
production |
2026-05-13 |
| splunk |
O365 Mail Permissioned Application Consent Granted by User |
production |
2026-05-13 |
| splunk |
O365 Mailbox Email Forwarding Enabled |
production |
2026-05-13 |