Blog Post

Microsoft Sentinel Blog

9 MIN READ

Office 365 Email Activity and Data Exfiltration Detection

Microsoft

Feb 13, 2020

This article shows how to use Office 365 message trace to analyze email activity and detect various security use cases like data exfiltration in Azure Sentinel. Office 365 Message Trace contain...

Updated Jun 03, 2020

Version 27.0

Stefan Simon

Microsoft

Joined February 16, 2017

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is a cloud-native SIEM, enriched with AI and automation to provide expansive visibility across your digital environment.

Stefan Simon

Microsoft

Jun 03, 2020

Dear readers, I would like to share with you another approach how to ingest o365 message trace data with O365 azure function. You can find more details in here - https://github.com/OfficeDev/O365-ActivityFeed-AzureFunction/tree/master/Sentinel/msgtrace