Microsoft ATA Suspicious Activity

Microsoft Advanced Threat Analytics · #00C853

Details

ID	`Microsoft ATA Suspicious Activity`
Version	-1
From Version	5.0.0
Playbook	—
Auto-run	No
Disabled	No
Read Only	No
Default	No

Source

incidenttype-MicrosoftATASuspiciousActivity.json

Download History Raw

{
    "id": "Microsoft ATA Suspicious Activity",
    "version": -1,
    "sortValues": null,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "Microsoft ATA Suspicious Activity",
    "prevName": "Microsoft ATA Suspicious Activity",
    "color": "#00C853",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "preProcessingScript": "",
    "closureScript": "",
    "disabled": false,
    "reputationCalc": 0,
    "fromVersion": "5.0.0",
    "layout": "Microsoft ATA Suspicious Activity"
}