Microsoft 365 - Unusual Volume of File Deletion (78a34b67-3c39-4886-8fb4-61c46dc18ecd)
Detects when a Microsoft Cloud App Security reported a user has deleted a unusual a large volume of files.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c) | Attack Pattern | Microsoft 365 - Unusual Volume of File Deletion (78a34b67-3c39-4886-8fb4-61c46dc18ecd) | Sigma-Rules | 1 |