microsoft defender for endpoint
January 7, 2025 · View on GitHub
Expression
product = microsoft defender for endpoint
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| email-receive | email_urls | ✓ | |||
| url_count | ✓ | ||||
| email-send | email_urls | ✓ | |||
| url_count | ✓ |