Alert Types New in this Release
The following built-in alert types are new in this release:
-
Internal Protocol Pattern Anomaly
-
Remote Access Pattern Anomaly
-
Suspected AS-REP Roasting Attacks
The following rule-based alert types are new in this release:
-
Office365 Rare Operations
-
Suspicious AD Machine Account Creation
-
Suspicious Kerberos Authentication from Golden Certificate
-
Suspicious Office365 Inbox Rule
-
Suspicious Office365 Mail Transport Rule
