microsoft defender
August 11, 2025 · View on GitHub
Expression
product = "microsoft defender"
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| email-receive | email_attachments_bytes | ✓ | |||
| email-send | email_attachments_bytes | ✓ |