O365 Pst Export Alert

Description

This search detects when a user has performed an Ediscovery search or exported a PST file from the search. This PST file usually has sensitive information including email body content

   Help

O365 Pst Export Alert Help

You must install splunk Microsoft Office 365 add-on. This search works with o365:management:activity

   Search

Open in Search