Microsoft 365 - Potential Ransomware Activity (bd132164-884a-48f1-aa2d-c6d646b04c69)
Detects when a Microsoft Cloud App Security reported when a user uploads files to the cloud that might be infected with ransomware.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Microsoft 365 - Potential Ransomware Activity (bd132164-884a-48f1-aa2d-c6d646b04c69) | Sigma-Rules | Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0) | Attack Pattern | 1 |