Event Details Critical

Event Summary
Event ID

20

Risk Score
95.00
Status
Under Investigation
Timestamp

Security Source

Microsoft Defender ATP (EDR)

Risk Category

Data Exfiltration

User Information
S
sandrews

[email protected]

Department

Engineering

Job Title

Product Developer III

View User Risk Profile
Mitigations
Network Isolation

Endpoint isolated from network

Applied
Applied by: security-admin
Event Details
Alert Id MS78901234
File Count 5
Exfil Method email attachment
Total Size Mb 18.5
Detection Time 2023-11-03T13:12:45
Recipient Domain competitor.org
Dlp Rule Triggered Confidential Financial Data
Sensitive Data Type Financial Reports
Raw JSON Data
{
  "alert_id": "MS78901234",
  "detection_time": "2023-11-03T13:12:45",
  "dlp_rule_triggered": "Confidential Financial Data",
  "exfil_method": "email attachment",
  "file_count": 5,
  "recipient_domain": "competitor.org",
  "sensitive_data_type": "Financial Reports",
  "total_size_mb": 18.5
}