Products: Microsoft - Graph Security API
| Rule ID | Rule Name |
|---|---|
| MATCH-S00725 | Microsoft CHM File Observed |
| MATCH-S00402 | Normalized Security Signal |
| LEGACY-S00109 | Threat Intel - Matched Domain Name |
| LEGACY-S00108 | Threat Intel - Matched File Hash |
| Log Mapper ID | Log Mapper Name |
|---|---|
| 354f3ec7-3c0a-470b-94b3-04a706cdf428 | Microsoft Graph Security API C2C |
| 31886ca5-59da-45e2-b2a2-3b1381c0f06e | Microsoft Graph Security API C2C - Dynamic Vendor/Product - Azure Advanced Threat Protection |
| b6c01dc5-a74b-435d-a22a-96b4f9f3168e | Microsoft Graph Security API C2C - Dynamic Vendor/Product - Microsoft 365 Defender |
| 0f089ffd-5e40-44a3-8b2d-14a160197bcc | Microsoft Graph Security API C2C - Dynamic Vendor/Product - Microsoft Defender for Cloud Apps |
| d6a16750-c9c5-4c31-bc14-2fa583172e3f | Microsoft Graph Security API C2C - Dynamic Vendor/Product - Microsoft IPC |
| ac8586c6-9954-4c70-860e-99a6dbcb3fc8 | Microsoft Graph Security API C2C - Dynamic Vendor/Product - Microsoft Office 365 Security and Compliance |
| 8d9e112e-167d-4cad-ba6f-12cd9918c10e | Microsoft Graph Security Alert API C2C |