This commit is contained in:
ShaniFelig 2021-09-29 15:30:55 +03:00
Родитель 236af239c5
Коммит c741ebc331
1 изменённых файлов: 0 добавлений и 1 удалений

Просмотреть файл

@ -1,5 +1,4 @@
id: 03e04c97-8cae-48b3-9d2f-4ab262e4ffff
kind: Scheduled
name: HAFNIUM Suspicious File Downloads.
description: |
'This query looks for messages related to file downloads of suspicious file types. This query uses the Exchange HttpProxy AOBGeneratorLog, you will need to onboard this log as a custom log under the table http_proxy_oab_CL before using this query.