LoFP LoFP / microsoft_exchange_online_message_trace

microsoft_exchange_online_message_trace rule

TitleTags
organizations that use azure monitor alert rules with financial or billing related naming conventions for legitimate infrastructure monitoring may trigger this rule. review the email subject and recipient to determine if the alert originates from a known internal azure subscription.