Managed Sentinel – Alert 080

Alert IDMS-A080
Alert NameSilent Office Activity
DescriptionThis alert is triggered when no Office 365 logs are detected the last 3 hours.
Severity LevelInformational
Threat Indicator
MITRE ATT&CK TacticsDefense Evasion
Log sourcesOffice Activity
False Positives
Recommendations