ATT&CK technique
View on MITRE ATT&CK →
T1213.002
Sharepoint
Collection
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Entra ID Sharepoint or OneDrive Accessed by Unusual Client | production | 2026-09-18 |
| elastic | M365 SharePoint/OneDrive File Access via PowerShell | production | 2026-09-18 |
| elastic | M365 SharePoint Search for Sensitive Content | production | 2026-09-18 |
| splunk | O365 SharePoint Suspicious Search Behavior | production | 2026-05-13 |