Files uploaded to Teams

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Detects files uploaded to SharePoint through Teams chats

Severity

Attention

Rule Requirement

Criteria

Action1: actionname = "DETECTION_ACTION_M365_OD_FILE_UPLOADED" AND (OBJURL contains "Microsoft Teams Chat Files") select Action1.TARGET_NAME,Action1.CALLER,Action1.RESOURCE,Action1.FILETYPE,Action1.TARGET,Action1.IPADDRESS,Action1.SIZE_I,Action1.USERAGENT,Action1.REF_URL,Action1.OBJURL,Action1.OPERATION

Detection

Execution Mode

realtime

Log Sources

Microsoft 365